It appears we had a data breach in 2020 and there are over 18K fake accounts in out systems all having "name@example.com as an email address. Has this happened to anyone else and if so, what steps can be taken to purge those accounts out of system?
Thank you for your help,
Jason
We had something similar happen a few years ago. We had a form on our website that a bot took advantage of, so we added a CAPTCHA to the form to prevent further misuse. I don't recall the steps we took to purge the accounts that were created.
Dan
To be clear, you have 18k customer accounts, right? Not user accounts? If the former then, yes, this is almost certainly a bot, not a breach. Adding reCAPTCHA to your account creation process will probably prevent it from happening again. You will want to review any transactions undertaken by these bot accounts. After that I'm sure support can help you clean up the bot accounts.
If you have unwanted user accounts, that does suggest a breach, and you will need to undertake more serious action immediately.