In accessing your account with your username and password, the unauthorized third party may have viewed your first name, last name, phone number, and mailing address - NortonLifeLockįor customers utilizing the Norton Password Manager feature, the notice warns that the attackers might have obtained details stored in the private vaults.ĭepending on what users store in their accounts, this could lead to the compromise of other online accounts, loss of digital assets, exposure of secrets, and more. The firm detected 'an unusually large volume' of failed login attempts on December 12, 2022, indicating credential stuffing attacks where threat actors try out credentials in bulk.īy December 22, 2022, the company had completed its internal investigation, which revealed that the credential stuffing attacks had successfully compromised an undisclosed number of customer accounts. More specifically, the notice explains that around December 1, 2022, an attacker used username and password pairs they bought from the dark web to attempt to log in to Norton customer accounts.

'This username and password combination may potentially also be known to others.' However, we strongly believe that an unauthorized third party knows and has utilized your username and password for your account,' NortonLifeLock said. Gen Digital, formerly Symantec Corporation and NortonLifeLock, is sending data breach notifications to customers, informing them that hackers have successfully breached Norton Password Manager accounts in credential-stuffing attacks.Īccording to a letter sample shared with the Office of the Vermont Attorney General, the attacks did not result from a breach on the company but from account compromise on other platforms.

Norton lifelock number