Credential Stuffing Attack on Energy Firm Npower’s App Exposed Customers' Personal and Banking Details

Contact details, birth dates, addresses, and partial bank account numbers are among the details believed stolen. But the affected accounts had been locked, Npower told the BBC.