Credential stuffing breaches

28 breaches

Chick-fil-ACredential stuffing exposed names, emails, payment cards, financial details and addresses. Reported to the Indiana AG.13K affectedRetailUSJul 20PcComponentesCredential stuffing exposed names, addresses, phone numbers, IP addresses and messages.RetailESJan 21SCSynthient Credential Stuffing Threat DataCredential stuffing exposed emails and passwords.2.0B accountsTechUnverifiedNov 6, 2025DraftKingsCredential stuffing breaches DraftKings customer accountsGamingUSUnverifiedOct 2, 2025North FaceCredential stuffing attack hits The North Face customer accountsRetailUSMay 29, 2025AustralianSuperCredential stuffing wave breaches Australian super fund accountsFinanceAUUnverifiedApr 4, 2025MicrosoftStorm-2139 used stolen customer credentials to hijack Azure OpenAI accountsTechUSFeb 26, 2025Hot TopicHacker offers Hot Topic loyalty database after infostealer compromiseRetailUSUnverifiedOct 23, 2024Neiman MarcusCredential stuffing exposed dates of birth, emails, IP addresses, names, payment cards, phone numbers, addresses, financial details, Social Security numbers and employment records.64K affectedRetailUSUnverifiedJun 24, 2024Advance Auto PartsSnowflake-linked breach exposes data of 2.3 million applicants and employees2.3M affectedRetailUSJun 14, 2024EverpurePure Storage Snowflake workspace breached, telemetry and customer contacts exposedTechUSJun 10, 2024QuoteWizardLendingTree subsidiary QuoteWizard data hit in Snowflake customer attacksInsuranceUSJun 7, 2024TicketmasterCredential stuffing exposed names, government IDs, emails, phone numbers, addresses and payment cards. Reported to the California AG.1,000 affectedMediaUSMay 31, 2024TicketekCredential stuffing exposed dates of birth, emails, names and passwords.18M accountsMediaAUMay 31, 2024SantanderCredential stuffing exposed names, financial details, payment cards and employment records.FinanceESUnverifiedMay 14, 2024AT&TCall and text records of nearly all AT&T wireless customers stolen via Snowflake110M affectedTelecomUSMar 19, 2024RokuCredential stuffing compromises about 15,000 Roku accounts576K affectedMediaUSMar 8, 2024NANaz.APICredential stuffing exposed emails and passwords.71M accountsTechUnverifiedJan 17, 202423andMeCredential stuffing exposed 6.9M users' ancestry data; UK ICO fine of GBP 2.31M6.9M affectedHealthcareUSOct 6, 2023PCPolish CredentialsCredential stuffing exposed emails and passwords.1.2M accountsTechUnverifiedMay 30, 2023Chick-fil-AAutomated credential stuffing attack compromises Chick-fil-A One accountsRetailUSMar 2, 2023PayPalCredential stuffing attack exposes Social Security numbers in PayPal accounts35K affectedFinanceUSJan 18, 2023Dunkin' BrandsCredential stuffing hit tens of thousands of accounts; USD 650,000 NY AG settlementRetailUSSep 26, 2019TaxSlayerHackers took over nearly 9,000 TaxSlayer accounts to file fraudulent returns8,800 affectedFinanceUSJan 29, 2016Internal Revenue ServiceCriminals abuse IRS Get Transcript tool to pull prior-year tax returns700K affectedGovernmentUSMay 26, 2015DropboxStolen employee password leads to Dropbox user email theft; 68M credentials later leak69M affectedTechUSJul 31, 2012Monster.comTrojan harvests 1.6 million entries from job site's resume database1.6M affectedTechUSUnverifiedAug 21, 2007LexisNexis Legal & ProfessionalIdentity thieves used stolen passwords to pull data on 316,000 people from Accurint316K affectedData brokersUSMar 10, 2005