2020 Credential stuffing — 300k–350k accounts
Data compromised
Passwords, Credentials
Technical writeup
Unsecured database with 380M records used for credential stuffing. 300k–350k accounts compromised. Rolling password reset in July 2020.
Root cause
Credential stuffing; recycled credentials.