J.Crew suffered a credential stuffing attack that may have compromised the personal data of customers. Fraudulent activity was apparently noticed last spring, but the firm did not reveal the number of compromised accounts on their website. Studies show it takes an average of 197 days to identify a data breach. As with any such leak incident, you should start changing the password for all of your accounts, and by no means should you recycle any old passwords just because its easier for you to memorize.”]