"Hackers Compromised Some Zola User Accounts to Buy Gift Cards"

Zola, a wedding planning startup that allows couples to create websites, budgets, and gift registries, recently discovered that hackers gained access to user accounts but has denied a breach of its systems.  The incident first came to light over the weekend after Zola customers took to social media to report their accounts had been hijacked.  Some Zola customers reported that hackers had depleted funds held in their Zola accounts, while others said they had thousands of dollars charged to their credit cards.  A Zola spokesperson stated that the accounts had been breached due to a credential stuffing attack, where existing sets of exposed or breached usernames and passwords are used to access accounts on different websites that share the same set of credentials.  Zola said fewer than 0.1% of accounts were compromised but would not say specifically how many users that equates to.  Zola said it temporarily suspended its iOS and Android apps during the incident and reset all user passwords out of an “abundance of caution.

TechCrunch reports: "Hackers Compromised Some Zola User Accounts to Buy Gift Cards"