Gen Digital, previously Symantec Corporation, and NortonLifeLock, alerted its clients to the fact that threat actors had compromised Norton Password Manager accounts through credential-stuffing assaults. The company stated that while none of its systems had been penetrated, the attack may have utilized credentials that came from another source. NortonLifeLock has not yet made public how many customers are affected. Threat actors could have accessed Password Manager accounts and seen information such as first and last names, phone numbers, and mailing addresses. NortonLifeLock has announced the adoption of additional security measures for the affected accounts and reset Norton passwords on those accounts in response to the incident.

The Vermont Office of the Attorney General reported on January 9, 2023, that NortonLifeLock Gen Digital experienced a data breach, where unauthorized third parties likely accessed customer usernames and passwords for accounts created before December 1, 2022. The breach began around December 1, 2022, and potentially exposed customer first names, last names, phone numbers, and mailing addresses. The number of affected individuals is currently unknown.

Identity theft protection firm LifeLock have exposed customers to additional attacks from ID thieves and phishers. The company just fixed a vulnerability on its site that allowed anyone with a Web browser to index email addresses associated with millions of customer accounts, or to unsubscribe users from all communications from the company.