Security Breach

[RAM555789]

Does anyone know of any websites or services that might be or are having security issues right now? I just had someone from Malaysia figure out my password and I'm wondering if its google or possibly some other service that was hacked.

[TetraSky]

Do you reuse the same password in many places?

If so, it's one of those. We can't help you on finding which without knowing your entire history.

 

Use a password manager like LastPass(paid) or Keepass (free) to create a unique password for each services that you use.

 

Dumps of breaches on the "dark web" come and go, it could very well be a breach from years ago if you haven't changed you password since.

Like this one, which is actually from a long time ago even though it popped back up now.

 

[Tsuki]

check out https://haveibeenpwned.com/ to keep up with which of your emails and passwords have been compromised. they stay very up to date with the latest breaches

[RAM555789]

1 minute ago, Tsuki said:

check out https://haveibeenpwned.com/ to keep up with which of your emails and passwords have been compromised. they stay very up to date with the latest breaches

Ah yup my google password was breached because of approll20 according to that. I had the same password between google and approll20.

[Velcade]

You're email password should always been unique and never shared with any other site.  Same goes for any billing or banking information.

[badreg]

If you're like most people, your email is connected to everything, so if it is breached, an attacker can use it to access all your other accounts by doing a password reset or through social engineering. Google follows good security practices by not trusting unknown devices, so just having your password is not enough to access your account, but there are many sites that don't do this.

 

Use a password manager to keep yourself secure.

[NineEyeRon]

My wife was unsuccessfully attempted recently, so I guess they had a sniff of an idea, good thing we use last pass and auto generated passwords, this finally convinced her of the benefits of 2FA which she had previously been sceptical of its value she hated having to cross check stuff.

[RAM555789]

1 hour ago, badreg said:

If you're like most people, your email is connected to everything, so if it is breached, an attacker can use it to access all your other accounts by doing a password reset or through social engineering. Google follows good security practices by not trusting unknown devices, so just having your password is not enough to access your account, but there are many sites that don't do this.

 

Use a password manager to keep yourself secure.

Yeah the only 2 thing connected to my card with my accounts are paypal and steam. My paypal already has a different password then my gmail and my steam has steam mobile guard so I have no worries about them accessing those.

[LogicalDrm]

14 hours ago, RAM555789 said:

Ah yup my google password was breached because of approll20 according to that. I had the same password between google and approll20.

Security tip: while sharing emails and passwords between services is mostly fine, don't do it between email, banking and other important ones and less important ones. Once they get into your email, they can reset most of the others.