Shadow.tech Hacked

[RealKyleTaylor]

I'm 95% sure this is legit given the email it’s coming from. Can’t find anything directly on their website or social media though, as of making this post, however people in their discord are discussing specific details of the email which makes me believe in its authenticity. Guess I’m just putting it here as a psa to update your password and make a 2fa for your shadow account if you haven’t. 

[Crunchy Dragon]

-Moved to General Discussion-

[Eigenvektor]

Setting up 2FA on any account that supports it is generally a good idea. However, as an extra precaution, I wouldn't click on any links in the email and sign in to their site as normal to do it.

[jensojensen]

got the same mail and think the incident is much bigger than they tell us, at least for now. 

 

Typically, I use an individual email address with unique passwords to register for new services, websites etc so I can identify where the leak had happened. 

For about 2 weeks I receive perfectly user targeted phishing-mails... on the mail address that is only used and known by shadow (at least it was). 

 

++++__________

 

I want also to highlight the following:

[...] The information concerned is your first and last name, e-mail address, date of birth, billing address and credit card expiry date. It is important to note that no passwords or sensitive banking data have been compromised. [...]'

 

... really guys, are you kidding me? They know the full name, the billing address and the tiny time window when the next credit card is delivered (due the expire date)....

 

I think shadow should rethink what 'not sensitive' means. 

[Alex Atkin UK]

13 minutes ago, jensojensen said:

... really guys, are you kidding me? They know the full name, the billing address and the tiny time window when the next credit card is delivered (due the expire date)....

 

I think shadow should rethink what 'not sensitive' means. 

That would be some dedication to snoop on someones mail for a couple of months to get ONE card.

 

Sure its possible, but its not considered sensitive banking data unless in combination with the card number and CVV.