The New York Office of the Attorney General (OAG) notified 17 well-known online retailers, restaurant chains and food delivery services that have been the victims of credential stuffing attacks.
https://www.securitymagazine.com/articles/96841-new-york-oag-notifies-17-companies-of-security-breaches