OkCupid Users Victims of Credential Stuffing

Love is in the air this week, but cyber-criminals are reportedly targeting user accounts on dating sites like OkCupid ahead of Valentine’s Day. Multiple news outlets have reported that OkCupid users say their accounts have been hacked, which the company says is likely the result of credential stuffing. “There has been no security breach at OkCupid. All websites constantly experience account takeover attempts and there haven't been any increases in account takeovers on OkCupid. There's no story here,” a spokesperson shared in a statement. According to the website's Help page, “Account takeovers...happen because people have accessed your login information. That can happen in a few ways. The simplest, of course, is using a password that's easy to guess. Another option is because of a breach on another site. If you use the same password on several different sites or services, then your accounts on all of them have the potential to be taken over if one site has a security breach.”