Pokémon resets some users’ passwords after hacking attempts

The Pokémon Company detected attempts to compromise user accounts and proactively reset passwords for affected users after identifying likely credential-stuffing activity; the company reports no system-wide breach and states only 0.1% of targeted accounts were compromised. The firm does not currently offer two-factor authentication, increasing the risk of credential re-use attacks among its large user base.