A report from KnowBe4 in March said the greatest threat now is not payment data but rather the theft of personal information that it describes as “credential harvesting.” This type of stolen credentials has become more popular because the information gives hackers immediate access to personal accounts, allowing them to bypass security measures.

Fashion brand The North Face and luxury jeweller Cartier have become the latest retailers to report having customer data stolen in cyber attacks. North Face has emailed some customers saying it discovered a "small-scale" attack in April this year. Cartier said "an unauthorized party gained temporary access to our system".

A credential stuffing attack compromised personal data on The North Face’s website in April. The US outdoor apparel retailer, owned by VF Corporation, disclosed the breach in notifications sent to affected users and filed with state regulators.