Norton LifeLock says thousands of customer accounts breached

TechCrunch ^ | January 15, 2023 | Zach Whittaker

[Golden Eagle]

Thousands of Norton LifeLock customers had their accounts compromised in recent weeks, potentially allowing criminal hackers access to customer password managers, the company revealed in a recent data breach notice.

In a notice to customers, Gen Digital, the parent company of Norton LifeLock, said that the likely culprit was a credential stuffing attack — where previously exposed or breached credentials are used to break into accounts on different sites and services that share the same passwords — rather than a compromise of its systems. It’s why two-factor authentication, which Norton LifeLock offers, is recommended, as it blocks attackers from accessing someone’s account with just their password.

The company said it found that the intruders had compromised accounts as far back as December 1, close to two weeks before its systems detected a “large volume” of failed logins to customer accounts on December 12.

“In accessing your account with your username and password, the unauthorized third party may have viewed your first name, last name, phone number, and mailing address,” the data breach notice said. The notice was sent to customers that it believes use its password manager feature, because the company cannot rule out that the intruders also accessed customers’ saved passwords.

[Fresh Wind]

Also Sean Vannity.

[1Old Pro]

What next, supposedly impenetrable and secure password keeper “LastPass” gets hacked...oh that's right, they were.

Never mind, your medical and bank records are secure in the cloud.

[Fresh Wind]

LastPass is a POS that caused more trouble for me that it was worth. What it was doing was inserting crap HTML code into edit boxes that had nothing to do with passwords or user names.