In 2012, account takeover (ATO) resulted in more than $4.9 billion total losses, a 69% increase from the prior year. ATO hacks have been on the rise in recent years, finding ways to compromise individual’s data in more ways than ever before. Four years ago, when the LinkedIn hack took place, it surged across news channels as hackers stole millions of users' account data, but it began to fall quiet in the weeks following. Now it’s 2016 and hackers are just ramping up the takeover phase. This attack shows why ATO can be extremely damaging to a company as it occurs in two phases. The first began in 2012, the collection phase, when account information was initially gathered from LinkedIn. After staying on top of it for a period of time and waiting to implement it, the second phase -- compromise -- began; bots were utilized to spray users' information across networks, to unlock sensitive information that lives outside of LinkedIn. This represents the long-term impact that ATO hacks can have. Users can change their passwords and see nothing happen with their personal data for years before it is suddenly blasted out. With hacking innovations progressing quicker than ever, what hacks from today will have an impact even a year from now? Without best security practices in place, matters can only worsen. There are many different ways to address account takeover and many choose to make it a matter of consumers using too many of the same passwords. The real task, however, is for businesses themselves who risk losing user trust if an ATO attack happens. All ATO hacks are different in the way they are carried out, and must be tackled specific to the needs of the company at risk; examples of ways to combat these attacks include using threat intelligence, rate limiting behavioral methods and anomaly detection. In this session, Mike Milner, CTO of IMMUNIO, will speak to how ATO hacks happen, and how they can be stopped, while offering insight into how an organization can best approach security in today's web-driven world. Using firsthand experience, Mike will shed light on tactics used by attackers to take over accounts, evade rate limits, even bypass captcha protection. By understanding how attacks take place you will be able to detect the attacker and build better defenses. Mike will also demonstrate a new tool for experimenting with Credential Stuffing attacks.