PetSmart hit by credential stuffing attacks in recent breach

TLDR:

• PetSmart experienced credential stuffing attacks on their customers’ online accounts.
• No evidence of compromise of the company’s website and servers was found.

Article Summary:

Major U.S. pet-oriented superstore chain PetSmart recently had its customers’ online accounts targeted by credential stuffing attacks. This prompted the company to implement a password reset for all affected accounts. Despite a rise in password guessing attacks, there was no evidence of the company’s website or servers being compromised.

The incident is part of a growing trend of credential stuffing attacks targeting various companies. Other notable victims of such attacks include Chick-fil-A, FanDuel, DraftKings, PayPal, Comcast Xfinity, and Spotify. In response to the incident, PetSmart sent out an email alert to customers, advising them to reset their passwords as a precautionary measure.

While the prevalence of credential stuffing attacks continues to increase, companies like PetSmart are taking steps to protect their customers’ accounts and data. This highlights the importance of strong password security practices and regular monitoring for suspicious activity.