Gen Digital, the parent company of the cybersecurity service and also previously known as Symantec, said in a notice to customers that a credential stuffing attack was probably the cause of the breach.
Data exposed in the December 2022 breach included names, phone numbers and mailing addresses, according to the company.