Have your passwords been stolen? 620 Million stolen passwords for sale on the dark web

[RobbinM]

Quote

Exclusive Some 617 million online account details stolen from 16 hacked websites are on sale from today on the dark web, according to the data trove's seller.

 

For less than $20,000 in Bitcoin, it is claimed, the following pilfered account databases can be purchased from the Dream Market cyber-souk, located in the Tor network:

Dubsmash (162 million), MyFitnessPal (151 million), MyHeritage (92 million), ShareThis (41 million), HauteLook (28 million), Animoto (25 million), EyeEm (22 million), 8fit (20 million), Whitepages (18 million), Fotolog (16 million), 500px (15 million), Armor Games (11 million), BookMate (8 million), CoffeeMeetsBagel (6 million), Artsy (1 million), and DataCamp (700,000).

 

Link to the Source if you want to know more

 

If you want to check if your e-mailadress or passwords has been found in prior found databases, please take a look at https://haveibeenpwned.com/

The new 620 million accounts have not yet been added to this website.

If you want to have a secure password solution have a look at Linus' friends over at https://www.lastpass.com/

[BobVonBob]

You didn't need to quote the whole article X_X

[Andreas Lilja]

Damn I've been pwned in 15 data breaches.

[rawrdaysgoby]

No did they take my passwords?! someone check for me they are 12345678 123456 password 0987654321

[RobbinM]

Nope, those passwords have not been compromised yet. You are lucky.

[captain_to_fire]

32 minutes ago, RobbinM said:

MyFitnessPal (151 million)

So hackers finally knew that one time I eat yogurt as a post-workout meal...

 

Nonetheless, this is a serious case of data breach.

[WereCatf]

Good thing I never have to worry about these data-breaches; I'm lame and boring, so I've never used any of the affected websites. Even if I had, I don't reuse my passwords (Keepass ftw), so the damage would only be limited to that one site. Then there's the fact that I never store my payment-information anywhere, so there wouldn't be anything to gain from getting access to my data.

[BobVonBob]

12 minutes ago, WereCatf said:

Then there's the fact that I never store my payment-information anywhere, so there wouldn't be anything to gain from getting access to my data.

Just because you don't store your payment info doesn't mean that they don't store your payment info.

[WereCatf]

Just now, BobVonBob said:

Just because you don't store your payment info doesn't mean that they don't store your payment info.

Not much to store, since I use PayPal -- my card-details never enter their systems.

[BobVonBob]

2 minutes ago, WereCatf said:

Not much to store, since I use PayPal -- my card-details never enter their systems.

Or do that.

[TetraSky]

Meh, each and every accounts that I have, has its own unique random string of characters as password.
Even if one site is found to be hacked, none of the others are affected.

 

What I find insane is that my bank has less security feature than my twitter account...

[DrMacintosh]

I don’t use any of those websites. And for websites like those that I do use, I let Safari auto generate a strong password and I let iCloud Keychain handle it. 

[mrchow19910319]

One time my Gmail password got stolen and google reported to me that theres someone logging into my account in Texas.

Changed my password into a stronger one. 

I have no idea why someone would want a 17 year old's email address/password.

[Guest]

Oh time to change passwords again

[SansVarnic]

@RobbinM Please select a quote (of an appropriate length) to place in your quote box and not the entire article.

This can be considered plagiarism.

[RobbinM]

Noted.

[Spotty]

Oh look, another set of data breaches.

 

[D13H4RD]

Not been pwned so far 

[Noctus]

Wth is with all these data breaches happening at once ???

[BobVonBob]

9 minutes ago, Noctus said:

Wth is with all these data breaches happening at once ???

After Collection 1 got a sizable amount of press I guess some criminals figure they might get more money out of their password collection since it's currently in the public consciousness.

[Maticks]

I loved to Lastpass about 6 months ago since its Free and i can use it on my phone and computers at the same time.

So much easier having a unique password per website, no my worrying about passwords being stolen.

 

At least with the Vault app on an old computer you have an offline version of the password vault if you are concerned about losing the passwords if the site ever was destroyed.

 

[ZacoAttaco]

22 minutes ago, Maticks said:

I loved to Lastpass about 6 months ago since its Free and i can use it on my phone and computers at the same time.

So much easier having a unique password per website, no my worrying about passwords being stolen.

 

At least with the Vault app on an old computer you have an offline version of the password vault if you are concerned about losing the passwords if the site ever was destroyed.

 

Agreed, probably been using LastPass for around 12 months. I only remember 1 password and the rest are stored in LastPass, I'm no longer worried about accounts being accessed without my permission and 2FA is activated on most of my services. LastPass really is a good product.

[mxk]

There was already a post that suggested the use of haveibeenpwned...

[mr moose]

Am I the only one who is worried about using things like lastpast for fear of having everything compromised at once?

[Noctus]

3 hours ago, mr moose said:

Am I the only one who is worried about using things like lastpast for fear of having everything compromised at once?

It's inevitable most likely. Time to get the old dusty book out and start writing our passwords in it again like loan sharks keeping track of clients