Match Group, CarMax Targeted in ShinyHunters Data-Breach Spree

Match Group Inc. and CarMax Auto Superstores Inc. were hit with separate lawsuits arising from a series of late-January data breaches that were allegedly carried out by the ShinyHunters cybercriminal group.

The attacks come amid what cybersecurity experts are calling a wave of social engineering attacks against US companies targeting single sign-on credentials.

David Stevens alleged Jan. 30 in a proposed class action filed in the US District Court for the Northern District of Texas that Match breached its duties under common law, contract law, industry standards, and the Federal Trade Commission Act to implement reasonable and adequate data-security ...