The increase is coming in a form of hacking called “credential stuffing” which the SEC said is emerging as a more effective way for attackers to gain unauthorized access to customer accounts and/or firm systems than traditional brute force password attacks