U.K. health, beauty retailer and pharmacy chain Superdrug Stores is warning customers that attackers may have compromised some of their personal information. Credential stuffing attacks can be a lose-lose situation for an organization – call it website B – that was never breached, but for which a user reused the same credentials they used for website A, which was hacked. Superdrug says the hacker is claiming to have compromised about 20,000 accounts, but the retailer says it has not been able to confirm this number.”]