Hackers are selling O2 customer data on the dark web following a separate data breach against gaming website XSplit, BBC News reports. Thieves took usernames and passwords from XSplit in a breach three years ago, and likely used those credentials to log in to O2 accounts to steal sensitive information, including users’ phone numbers, email addresses, passwords and dates of birth. The hackers may have used a tactic known as “credential stuffing” to access the accounts by using software to repeatedly try to access an account by using login information taken from other websites. O2 denied any data breaches have taken place. "We have not suffered a data breach. Credential stuffing is a challenge for businesses and can result in many company's customer data being sold on the dark net,” O2 said in a statement.
Full Story