Gen Digital, which owns the Norton brand, says it detected a credential stuffing campaign on December 12, 2022, which has been running since at least December 1, 2022, and has been targeting Norton accounts. Credential stuffing attacks can only succeed when there has been password reuse – When the same password has been used to secure accounts on multiple platforms. Lists are compiled from multiple data breaches and are used to try to access a wide range of accounts. Credential stuffing is the use of lists of previously compromised passwords to try to gain access to accounts on other platforms.

Norton has not suffered a data breach and its systems have not been hacked, but there is still a risk to certain users – those that have committed the cardinal sin of password management and have not set complex, unique passwords for their Norton account and password manager.Īccording to the notification letters now being sent, Norton detected a credential stuffing campaign targeting its users. The news comes shortly after one of the world’s most popular password managers – LastPass – suffered a data breach in which a copy of users’ encrypted password vaults was stolen.

Users have been advised to change the password for their Norton account and Password Manager immediately. The antivirus software and cybersecurity firm Norton has recently started notifying certain Norton LifeLock customers that a malicious actor has gained access to their Norton accounts and potentially also accessed their password vaults.

Norton lifelock account