The North Face has suffered its fourth credential stuffing attack since 2020, with the latest breach detected on April 23, 2025. Attackers accessed customer information including names, purchase histories, addresses, emails, birth dates, and phone numbers, though payment data remained secu...
23andMe has filed for Chapter 11 bankruptcy and plans to sell its assets through auction after years of financial struggles. While the genetic testing company promises to protect customer data during this transition, privacy experts express serious concerns about the fate of 15 million use...
PayPal agrees to pay $2M fine to New York State for a 2022 data breach affecting 35,000 accounts. The breach, caused by credential stuffing attacks and security vulnerabilities, exposed customer data including SSNs. PayPal has since implemented enhanced security measures including mandator...
Washington state sues T-Mobile over a 2021 data breach that exposed personal information of 79 million people nationwide, including 2 million state residents. The lawsuit alleges inadequate security measures, delayed breach detection, and insufficient customer notification, seeking enhance...
Following multiple data breaches affecting 344 million customers, the FTC orders Marriott and Starwood Hotels to implement strict security measures, including encryption, monitoring, and authentication protocols. The 20-year mandate requires biennial assessments, customer data protection, ...
