Norton LifeLock has announced that a large number of customer accounts have been affected by a breach.
A note to customers from Gen Digital, Norton’s parent company, claimed that the breach was likely the result of a credential stuffing attack, in which attackers use lists of previously disclosed passwords to hack into numerous accounts held by victims are used, assuming that they are used the same passwordd for multiple services.
On December 12, 2022, Gen Digital said it received a large number of failed login attempts, which alerted it to the attack. The compromised accounts are believed to date back to December 1st.
Passwords at risk
Given that many admit to reusing the same passwords across different accounts, these attacks can be very effective.
The notifications were sent to over 6,000 customers whose accounts had been hacked. Gen Digital stated that hackers may have obtained personal information such as names, phone numbers and addresses when hacking customer accounts. Passwords saved with the password manager The feature may also have been accessed, with Gen Digital warning it can’t be ruled out.
LifeLock is on Recognize theft protection Platform from Norton, the company best known for its once market-leading antivirus software. It also comes bundled with the company’s Norton 360 security suite.
As Gen Digital himself recommends, multi-factor authentication is essential for security by ensuring that it is actually you who are trying to access your account. It works by sending a confirmation prompt or code to another of your devices, e.g. B. your smartphone, via SMS or a dedicated one authentication appwhen trying to log into your account.
LifeLock’s password manager isn’t the only one affected by a potential security breach. LastPass has had a hot period ever since The customer’s password vaults were stolen last year, although customers were assured that passwords would remain encrypted.
- For optimal security, consider using best firewall