2020 Credential stuffing — 530k accounts

2020 530.0K records affected

Data compromised

Email addresses, Passwords, Credentials

Technical writeup

Credentials from other breaches used in credential stuffing. 530k+ Zoom accounts sold on dark web. Emails, passwords, meeting URLs, HostKeys. Corporate clients affected.

Root cause

Credential stuffing; recycled credentials from prior breaches.

References

https://www.huntress.com/threat-library/data-breach/zoom-data-breach