The safety of customer data is very much at risk despite prodigious investments in cybersecurity. This begs the question: How is that possible? In April 2022, General Motors customer accounts suffered a massive account takeover (ATO) attack. Affected users watched as their GM store credits were drained or emptied. Even worse, General Motors’ site wasn’t even hacked; the credentials were stolen from other sites and used to gain access to GM accounts. 

In this digital era, all businesses are at risk of data breaches. In 2021, Facebook suffered a massive data breach that exposed the personally identifiable information (PII) of over 550 million users. Similarly, in 2020, a massive Twitter data dump posed another threat to large-scale account takeovers. ATO attacks are rising and businesses should be worried.