DocMorris credential‑stuffing hits ~20,000 accounts; accounts blocked, payments restricted

DocMorris reported a credential‑stuffing attack affecting about 20,000 of 10.4 million active accounts. The company blocked affected accounts, noted some orders were placed to modified delivery addresses, and temporarily restricted payment options for new customers—constituting a material service degradation to e‑commerce operations.