The Register reports:
Joining the long queue of retailers dealing with cyber mishaps is outdoorsy fashion brand The North Face, which says crooks broke into some customer accounts using login creds pinched from breaches elsewhere.
According to a consumer notice filed with the Vermont Attorney General’s Office, the outdoor gear seller spotted unusual activity on April 23.
It described the incident as a “small-scale credential stuffing attack” that likely involved login details stolen from previous breaches, targeting users who reused the same credentials across multiple websites.
Read more at The Register.