Question Looks like I got my credentials hacked, but what service?

[Red Squirrel]

Got an email from "have I been pwned" as I set my domain to be monitored. This is the content.

In January 2019, a large collection of credential stuffing lists (combinations of email addresses and passwords used to hijack accounts on other services) was discovered being distributed on a popular hacking forum. The data contained almost 2.7 billion records including 773 million unique email addresses alongside passwords those addresses had used on other breached services. Full details on the incident and how to search the breached passwords are provided in the blog post The 773 Million Record "Collection #1" Data Breach.

Curious, did anyone else get this? Looks like I need to go around changing all my passwords again. I JUST did this like maybe a month ago too.

By doing this I also learned that some sites have extremely terrible password security. Tripod was one of the worst offenders. My passwords were too complex and it was not accepting them. I ended up having to use a single dictionary word before it took. I don't even use a lot of those accounts anymore I need to look into what it takes to just delete them.

Some systems will also accept a complex password, but it won't actually register it, so when you go to login to test it, it does not actually work and you have it issue a reset. I don't get how that even happens, it's suppose to just be hashed anyway, so the types of characters you put or how long it is should not even matter.

 

[jameny5]

I saw this on a tech blog - CNET. I read it but I did not enter my information. If they did not tell you were hacked I wouldn't enter my credentials into it. Just be safe and change your password. Make it a complex one. I mean if you are concerned about it then enter your info and see if you are affected. I am not going to unless I have been told I have been hacked.

 

[Red Squirrel]

The issue is I have over 100 passwords for various accounts for all sorts of stuff online. Trying to narrow it down to a specific service so I can change just that one. I already went through every single one of them about a month ago as a routine thing. Guess I'll just have to do it again.

Most of my passwords are complex, something like this: >(nseKJjWeK4jlLTG)ZV(U6

 

[jameny5]

You do have a point there. The article says email addresses and other websites. I guess putting in your info wouldn't hurt. They should at least have a list of all the compromised sites. I think to be accurate I have accounts with twenty sites. Not more than thirty. But, Like you said it can be a daunting task trying to enter 100 different emails and passwords to figure out which ones are affected. I might have and put my info and see where I stand.