Hard Off: credential stuffing on the Hard Off Net Mall logs into 149 accounts

1. 2019-11-29

   Login attempts with credentials from other services began and lasted until 7 January 2020. [1]

2. 2020-01-07

   Access monitoring revealed the logins. [1]

3. 2020-01-10

   Public disclosure; the members were contacted and the police informed. [1]

In the {n:149} accounts, name, address, phone, email, gender, occupation, birth date, purchase history, delivery addresses and partial card details (holder, expiry, last three digits) may have been viewed. [1]

The affected IDs cannot be used until the password is changed, and the attacking sources were blocked. [1]

Members who use the same password elsewhere were asked to change it at once. [1]