Security News > 2021 > February > RIPE NCC Internet Registry discloses SSO credential stuffing attack

RIPE NCC is warning members that they suffered a credential stuffing attack attempting to gain access to single sign-on accounts.
RIPE NCC is a not-for-profit regional Internet registry for Europe, the Middle East, and parts of Central Asia.
RIPE disclosed today that they suffered a credential stuff attack over the weekend targeting their single sign-on service.
This SSO service is used to login to all RIPE sites, including My LIR, Resources, RIPE Database, RIPE Labs, RIPEstat, RIPE Atlas, and the RIPE Meeting websites.
"Last weekend, RIPE NCC Access, our single sign-on service was affected by what appears to be a deliberate 'credential-stuffing' attack, which caused some downtime."
The RIPE NCC SSO service offers two-factor authentication, which members can enable on their profile page.
News URL
Related news
- How New AI Agents Will Transform Credential Stuffing Attacks (source)
- Researchers Expose New Polymorphic Attack That Clones Browser Extensions to Steal Credentials (source)
- Australian pension funds hit by wave of credential stuffing attacks (source)
- CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download (source)