Norton LifeLock data breach exposes data of thousands of customers

Norton LifeLock data breach overview: 

• Who: Norton LifeLock disclosed that a data breach that began in December may have compromised the accounts of more than 6,000 of its customers. 
• Why: Norton’s parent company, Gen Digital, attributes the data breach to a credential stuffing attack. 
• Where: Consumers nationwide use Norton. 

Norton LifeLock disclosed it suffered a data breach that potentially compromised the accounts of more than 6,000 of its customers. 

Norton’s parent company, Gen Digital, revealed in a notice to customers that the data breach happened in recent weeks and may have allowed hackers to access thousands of customers’ password managers, TechCrunch reported. 

Gen Digital reportedly attributes the Norton LifeLock data breach to a credential stuffing attack, which is when a bad actor attempts to gain access to an account by using previously exposed or breached credentials. 

Norton advises its customers to use a two-factor authentication, which would prevent someone from being able to access an account using only a password, TechCrunch reported.

The company reportedly says bad actors may have started compromising accounts from as far back as Dec. 1, around two weeks before Norton reportedly says it detected a large number of failed login attempts. 

Norton LifeLock data breach possibly exposes customer names, phone numbers, mailing addresses

The Norton LifeLock data breach possibly exposed account data that includes first and last names, phone numbers and mailing addresses, according to the company. 

Norton reportedly sent notice of the breach to a total of around 6,450 of its customers who use its password manager feature, with the company saying it couldn’t rule out a breach of saved passwords, as well.

Password managers are a highly recommended resource for the generation and storage of a distinctive password, with the caveat that safeguards must be in place to limit any damage in the event they are compromised, TechCrunch reported. 

In other Norton news, the company faced a class action lawsuit last year alleging it tracks consumer locations and online interactions on its website. 

The consumers argue Norton uses “session replay” software embedded in its website to track mouse movements, clicks, pages viewed, locations and entered information. 

Have you been impacted by the Norton LifeLock data breach? Let us know in the comments. 

Read About More Class Action Lawsuits & Class Action Settlements:

• Class action alleges Apple records users’ private data, activity
• Remote work increases data breach risk, research finds
• Tech class action lawsuits allege product defects, misleading advertising
• Apple class action alleges company records, uses consumers’ personal information