The Dangers of Credential Stuffing

As hackers grow more sophisticated, consumers should be aware of the evolving techniques used to steal and exploit their sensitive, personal data. One method hackers are using at an increasing rate is called ‘credential stuffing,’ a type of cyberattack where a user’s stolen account login credentials are used to gain unauthorized access to the user’s other online accounts that use the same credentials. Using this method, hackers can gain access to additional sensitive information, including the user’s payment card numbers, social security number, driver’s license number, and address, which may be stored on those other online accounts. As reported by Wired, “Nest, Dunkin’ Donuts, OkCupid, and the video platform DailyMotion have all seen their users fall victim to credential stuffing.” The negative effects of this exploitative technique can be long-lasting and far-reaching, as experts have warned that credential stuffing can lead to “ripples of insecurity across the internet,” resulting in substantial invasions of consumers’ private information.