DraftKings tells customers about credential stuffing attacks, BC says

DraftKings (DKNG) has informed an undisclosed number of customers that their accounts were breached in a recent wave of credential stuffing attacks, BleepingComputer’s Sergiu Gatlan reports. The gambling company told affected customers in notification letters sent last week that cyberattackers had gained access to their accounts and a “limited amount” of their information in attacks that showed all the signs of a credential stuffing campaign, the author notes. The company noted that the attackers did not access sensitive data including “government-issued identification numbers, full financial account numbers,” or other data that would have allowed them to breach customers’ bank accounts or commit identity theft, the author says.