https://haveibeenpwned.com/

 

Should tell you if your account has been breached, where and when. 

 

All of mine were already reset when the sites advised of a breach 

Reset as in passwords changed?

5 minutes ago, DGW said:

Reset as in passwords changed?

Yes

That's Troy Hunt's website and very good it is.

 

You can search for individual emails addresses or if you need to check all of them for business and have it set up to alert you with new ones.

 

Useful resource.

 

Although the bit headline for the other day 711M addresses is a bit of a read herring, 90% of them are junk, ok that's still 70M addresses but a fair bit down on the headline.

The worry about all these sites that claim to tell you if you've been hacked, is surely that as soon as you enter your email address...... they harvest it and you may have left yourself more vulnerable? 

As my good lady constantly reminds me, tell 'em nowt! Treat everything on a need to know basis. Good advice. 

 

 

https://haveibeenpwned.com/

is bit different. It only lists things that have been disclosed elsewhere, usually pastebin.com and passwords are removed before publishing.

Troy Hunt is a well known and respected security researcher. So that site you can trust.

 

https://en.wikipedia.org/wiki/Troy_Hunt

 

However, you're right to be suspicious.

Edited 4 September, 20178 yr by Aspman

What his site doesn't make clear is what you should do if your email does appear on one of those lists? Change password? Stop using that email addy?

I suppose there are plenty of sources of advice so why bother recreating them.  If you've enough savvy to find his site and find out you've been compromised then you'll manage to find out what to do.

My throwaway email is listed as 2 compromises and a paste list.

Both priir to my most recent change. One is a 2013 adobe breach, which tallies with when my paypal was used for laptops to be purchased by a naerdoowell in london.

My newer one for proper stuff is clean.

Biggest surprise is so is my work email.. given how many times weve gotten bulletins about the same thing (dodgy link from a colleague etc) which usually get issued after someones been a bit thick and clicked the link.. i reckoned we'd all be on a big list...

20 hours ago, S00perb said:

What his site doesn't make clear is what you should do if your email does appear on one of those lists? Change password? Stop using that email addy?

 

Change the password on any sites where you may have used that combination of email address and password. 

If a set of credentials is known obtained from one compromised website, criminals will try them in plenty of other sites knowing that most people are pretty poor at security and reuse passwords. 

 

Paypal could be the most secure site in the world but if your details are obtained from somewhere else then you are at risk. 

 

For best practice, use unique passwords and where possible enable two factor authentication so you have to prove your identity with a phone as well for example. 

It's pretty much impossibly not to end up on one of these lists eventually.

 

 

4729 million and counting.................I wouldn't be surprised if mine is on it.

all three of mine are listed as two breaches..adobe & that 2017 spam bot that got into a server....

 

hmm.....reset email passwords then eh?

Mine were on Adobe too, but I've never used any Adobe services or had an Adobe account. 

 

A little confused where it slurped my detail from. 

Latest hack is on EQUIFAX , who are a credit reference agency, where a lot of data/personal details have been compromised. Aparently they were warned a few days ago about problems,

http://www.moneysavingexpert.com/news/protect/2017/09/massive-equifax-data-breach---what-you-need-to-know

All is grand if you're American. Equifax will take care of you and provide credit monitoring for free.

 

Oh you're European, go fk yourself then!

 

If you want to check your credit record for free you can use Noddle BTW

Edited 14 September, 20178 yr by Aspman

Apparently some one of equifax's user profiles for system access was

 

Username admin

Password admin

 

 

Oh dear....

Yes I read that too. But the data was stolen because they hadn't applied a patch.

 

They're being investigated by the FTC in the US and ICO here.

 

You can bet the bad guys are eyeing up Experian and the other credit brokerages now. And like every other big company they'll have neglected the development and maintenance of their IT infrastructure to save a few coppers, "It'll never happen to us" etc etc.

On 14/09/2017 at 15:49, Aspman said:

If you want to check your credit record for free you can use Noddle BTW

 

ClearScore are also free.