3 ms·
So my most-breached e-mail address (a hotmail address from 17 years ago that I basically use for stuff I know will send me spam) has 3 or 4 newly-added breaches
by AdmiralAsshat 9y ago
So my most-breached e-mail address (a hotmail address from 17 years ago that I basically use for stuff I know will send me spam) has 3 or 4 newly-added breaches.
2,844 Separate Data Breaches (unverified): In February
2018, a massive collection of almost 3,000 alleged data
breaches was found online. Whilst some of the data had
previously been seen in Have I Been Pwned, 2,844 of the
files consisting of more than 80 million unique email
addresses had not previously been seen. Each file
contained both an email address and plain text password
and were consequently loaded as a single "unverified"
data breach.
Compromised data: Email addresses, Passwords
The problem is I have no idea what this breach is sourced from, so I don't know what account in particular was affected. Not Troy's fault, obviously, but it's basically just telling me, "Your e-mail address and a password to somewhere was found online somewhere." For all I know it's recycled data from a breach I already know about.
At this point it's not really a big deal. I use a password manager and they're all random at this point, so I just need to figure out which one to rotate.
- chadlavi 9y agoSame. I got the email this morning and looked to see what I need to do. Turns out, what I need to do is just, like, be wary? No way to know what accounts I ought to go change passwords for. Seems unreasonable to go change literally all of them over this, that would take forever. This news makes me panicky but gives me no reasonable course of action.
- tail-recursion 9y agoI wrote a little python script to match the websites with the Alexa Top 1 Million and sort by rank. I found 268 top 1 million sites in the pwned list. You can check out the ranking here if you want https://github.com/tail-recursion/hibp-rankings/ https://github.com/tail-recursion/hibp-rankings/. Notable websites include; lotro.com, mtgox.com, malwarebytes.org, daemon-tools.cc, autohotkey.com, vbulletin.org
- ryanlol 9y agoSo, recycled old dumps all of them? Every single big site I can see here has coincidentally already had their data publicly dumped.