JNJ Technology

Recently, thousands of NortonLifeLock customers had their accounts compromised, potentially allowing malicious actors to access user password managers. Gen Digital, Norton LifeLock’s parent company, has sent notices to over 6,000 customers whose accounts were compromised.

What is the threat?
According to a recent data breach notice shared with the Office of the Vermont Attorney General, the attacks did not stem from a breach on Norton but from compromised credentials on external platforms.

“Our own systems were not compromised. However, we strongly believe that an unauthorized third party knows and has utilized your username and password for your account,” NortonLifeLock said.

On December 12, 2022, Norton detected an “unusually large volume” of failed login attempts to customer accounts, indicating a credential stuffing attack. The company began their investigation and discovered that around December 1, 2022, an “unauthorized third party” used a list of usernames and passwords obtained from another source, such as the dark web. By December 22, the company had completed their investigation and revealed that the attacks successfully compromised customer accounts. The total number of breached accounts has not been disclosed at this time.

Why is it noteworthy?
NortonLifeLock provides protection against identity theft and various cybersecurity services worldwide. Incidents involving customer password theft are becoming more of a concern in recent years. Earlier in 2022, LastPass announced a data breach in which attackers stole millions of encrypted password vaults.

What is the exposure or risk?
Norton has disclosed that customers’ personal information — including first and last name, phone number, and mailing address – may have been viewed by the unauthorized third party. Additionally, the company stated they “cannot rule out” that the attackers accessed information stored in the Norton Password Manager, for those utilizing the feature. If the password manager was compromised, threat actors could leverage that information to gain access to accounts on other platforms.

References

For more in-depth information about the recommendations, please visit the following links:

https://techcrunch.com/2023/01/15/norton-lifelock-password-manager-data/

https://www.bleepingcomputer.com/news/security/nortonlifelock-warns-that-hackers-breached-password-manager-accounts/
https://web.archive.org/web/20230113191952/https://ago.vermont.gov/blog/2023/01/09/nortonlifelock-gen-digital-data-breach-notice-to-consumers/

NortonLifeLock - Gen Digital Data Breach Notice to Consumers - Office of the Vermont Attorney General History is littered with hundreds of conflicts over the future of a community, group, location or business that were "resolved" when one of the parties stepped ahead and destroyed what was there. With the original point of contention destroyed, the debates would fall to the wayside. Archive Team bel...

No problem is too large or too small for our certified technical experts✅ What are you waiting for? Help is just a phone call away.

You have realized your business needs to change and it’s time to put the wheels in motion - however you don’t have to do it alone.🤝

We have helped our client transfer data, migrate to new email accounts, restructure entire offices, run new network cables, successfully execute implementations quickly and efficiently, and so much more through our proven process. ✅

📡Contact our expert team today to find out more!
☎ [email protected] or 609-548-8224

JNJ Technology JNJ Technology is here to help you take the hassle out of IT Network Security and Computer management so you can focus on the success of your business.