Security experts recommend several options for derailing hackers with stolen user credentials. The StubHub compromise was unusual only in the arrest of suspects. One of the most common techniques is to perform additional security checks when anomalies occur during the login process. Fraud detection and two-factor authentication can be difficult to deploy, but there are lots of vendors that provide tools to ease the pain. The consequences of these breaches often extend well beyond the primary impacted businesses, experts say. In the case of StubHub, roughly 1,600 accounts were illegally accessed and more than 3,500 tickets bought for events.”]
Source: https://www.csoonline.com/article/2458222/how-to-prevent-a-website-compromise-like-stubhub.html