Dinos: its mail order site Dinos Online Shop suffered a password list attack, with 41 unauthorized logins among 1,605 login attempts

1. 2021-05-12

   From an overseas IP address, 1,605 login attempts were made and 41 accounts were logged into. [1]

In the 41 accounts that were logged into, names, membership status and discount rates may have been viewed. The company said the email addresses and passwords used had been obtained elsewhere and had not leaked from the company. [1]

The company blocked traffic from the attacking IP address, stopped logins to the accounts concerned and contacted the customers. It said it would keep warning users against reusing passwords. [1]