PcComponentes, a leading Spanish retailer, has denied a major data breach but confirmed a credential stuffing attack affecting some customer accounts. The incident involved leaked order details and personal data from compromised accounts, prompting enhanced security measures. #CredentialStuffing #InfostealingMalware
Keypoints
- PcComponentes denied a full data breach but confirmed a credential stuffing attack.
- The threat actor released some customer data, including names, addresses, and contact info.
- Investigation found no evidence of unauthorized access to the company’s core systems.
- The company implemented additional security measures like CAPTCHA and mandatory two-factor authentication.
- Customers are advised to use strong, unique passwords and stay alert for phishing scams.