Reddit has informed a large number of users about a “security concern” that requires them to reset their passwords. The security concern refers to unusual user behavior spotted by Reddit admins, which indicated a credential-stuffing attack affecting many accounts.
One Reddit admin explained that the company suspects threat actors were trying to break into Reddit accounts using stolen login credentials for different websites. Since users often use the same e-mail and password combination for multiple websites, a compromised account on one website may allow hackers access to user accounts on different websites as well.
Read more: https://www.tripwire.com/state-of-security/featured/reddit-users-locked-accounts-security-concern/