PetSmart was forced to log people out of their accounts and reset their passwords due to an ongoing credential stuffing attack.
The American pet retail giant sent out a security notification to its users telling them that an unidentified threat actor tried to log into people’s accounts via credential stuffing - an automated attack in which the hacker tries infinite username/password combinations until they break into an account.
