Norton Password Manager breached news

Norton Password Manager was not breached.  Usernames and passwords stolen from other websites were used to attempt to access individual Norton accounts.  If you used the same credentials to sign into Norton as you use on other sites (a very, very BAD idea), then you were at risk of having your Norton account compromised.  The fault for accounts that were potentially hacked lies solely with the users who failed to follow the most basic of password security practices, not Norton.  Norton Password Manager is extremely safe, as it sits behind not one, but two logins (Norton Account and Password Manager -- please use a different password for each), offers two-factor authentication, and now requires a reCAPTCHA for sign-in to help prevent credential stuffing attacks.

The_Eagle_007:
I always use separate passwords for PM and norton account and have 2fa also. But the fact worries me that they tried to login using credential stuffing attacks over such large scale of Norton account.

Credential stuffing is only a threat to people who reuse the same log in credentials over multiple sites.  I mean, anyone -- you or I -- can try to log in using a random name and password and hope to get lucky.  Nothing a website can do to prevent the attempt, although the reCAPTCHA will hinder the use of bots to perform large scale attacks.  As long as you use a different username/password on each site, this sort of attack cannot compromise any of your accounts.