TLDR
Domino's Pizza customers have been notified that their accounts were accessed by criminals using email/password combinations stolen in unrelated breaches and reused on the Domino's login page. This pattern, called credential stuffing ,...
How it works
Domino's Pizza customers have been notified that their accounts were accessed by criminals using email/password combinations stolen in unrelated breaches and reused on the Domino's login page. This pattern, called credential stuffing ,...
Red flags
- Email claiming your account was accessed by an unauthorised third party but the retailer insists its own systems were not breached Orders, loyalty points or saved cards you don't recognise, or sudden password reset prompts you didn't request Follow up calls, texts or emails that quote your real order history and impersonate the company
What to do
- 1Reset the Domino's password to a long, unique one and change it on every other site where you reused it, starting with accounts holding payment data Enable two factor auth
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/news/2026/10/dominos-customers-targeted-in-credential-stuffing-attacksFAQ
Is Dominos customers hit by credential stuffing reusing passwords from old breaches a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Email claiming your account was accessed by an unauthorised third party but the retailer insists its own systems were not breached Orders, loyalty points or saved cards you don't recognise, or sudden password reset prompts you didn't request Follow up calls, texts or emails that quote your real order history and impersonate the company
What should I do first?
Reset the Domino's password to a long, unique one and change it on every other site where you reused it, starting with accounts holding payment data Enable two factor auth
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.