Jump to content

Linustechtips.com breached?

pocketdrummer
By pocketdrummer
in General Discussion
 Share
Recommended

Posted by colonel_mortis,

Back in September 2015, the forum was breached. At the time, everyone was notified (via email, as well as discussion on either the wan show or the wan aftershow), and everyone's passwords were reset.   We are looking into this further, but the initial indications are that this is just the data from that breach finally surfacing publicly.   If anyone has data to suggest otherwise (eg accounts created after that date), please do let me know.

Recommended by colonel_mortis

7 reactions

Go to this post
Recommended

Posted by Skiiwee29,

Just an update, Linus made a quick announcement on WAN show last night and can be found here:    

Recommended by Skiiwee29

2 reactions

Go to this post
Posted

I just got a notification from Google One that my credentials for linustechtips.com was leaked. Is LTT aware of this?

 

image.thumb.png.ea1b88172783cbc1a377ef8c56c675a6.png

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
Just now, pocketdrummer said:

I just got a notification from Google One that my credentials for linustechtips.com was leaked. Is LTT aware of this?

 

image.thumb.png.ea1b88172783cbc1a377ef8c56c675a6.png

Probably had a virus or malware that tracked your keyboard inputs when you were logging in. Make sure to run windows antivirus, uninstall all google extensions that are sketchy, and if nothing shows up your either right or you need to install a 3rd party software to get rid of said malware.

I edit my messages more than not –

Probably some dude on the internet

 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
  • Author
1 minute ago, Hellowpplz said:

Probably had a virus or malware that tracked your keyboard inputs when you were logging in. Make sure to run windows antivirus, uninstall all google extensions that are sketchy, and if nothing shows up your either right or you need to install a 3rd party software to get rid of said malware.

The password that was leaked is actually an old password from over 3 years ago. I also don't come to this forum too often, and I started using a password manager with random strings after I stopped using that password. I don't believe it's malware.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
42 minutes ago, pocketdrummer said:

I just got a notification from Google One that my credentials for linustechtips.com was leaked. Is LTT aware of this?

 

 

Your password is a known password, this has nothing to do with LTT or this website. 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Your account is from 2013

The forum DID have a breach MANY years ago

It's likely that data is now being indexed by Google One's dark web search.

Current Network Layout:

Current Build Log/PC:

Prior Build Log/PC:

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

If you haven't already done so change your password from account settings. You should also change your password on any other websites where you may have used the same password.

CPU: Intel i7 6700k  | Motherboard: Gigabyte Z170x Gaming 5 | RAM: 2x16GB 3000MHz Corsair Vengeance LPX | GPU: Gigabyte Aorus GTX 1080ti | PSU: Corsair RM750x (2018) | Case: BeQuiet SilentBase 800 | Cooler: Arctic Freezer 34 eSports | SSD: Samsung 970 Evo 500GB + Samsung 840 500GB + Crucial MX500 2TB | Monitor: Acer Predator XB271HU + Samsung BX2450

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

I also got this notice and haven't been here in 8 years according to my unread messages. The password reported by Google One was randomly generated back in the day. I had to reset to log in because that was multiple complete wipes ago. A breach years ago would still make sense, but I would hope the very capable team members that run this site might have emailed a notice of this close to when it happened. 

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Make sure you have 2FA enabled

Phone 1 (Daily Driver): Samsung Galaxy Z Fold2 5G

Phone 2 (Work): Samsung Galaxy S21 Ultra 5G 256gb

Laptop 1 (Production): 16" MBP2019, i7, 5500M, 32GB DDR4, 2TB SSD

Laptop 2 (Gaming): Toshiba Qosmio X875, i7 3630QM, GTX 670M, 16GB DDR3

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

I see A LOT of people making contradicting statements here. Does anyone actually know how this feature works?

 

 

13 hours ago, Hellowpplz said:

Probably had a virus or malware that tracked your keyboard inputs when you were logging in.

12 hours ago, GuiltySpark_ said:

Your password is a known password, this has nothing to do with LTT or this website. 

12 hours ago, da na said:

If you reused the password on another website, that website was breached.

12 hours ago, Lurick said:

Your account is from 2013

The forum DID have a breach MANY years ago

It's likely that data is now being indexed by Google One's dark web search.

12 hours ago, Spotty said:

The warning given by Google's Password Manager here indicates that the email & password you have saved for linustechtips.com matches credentials in their database of known exposed emails/passwords. Those credentials may have been exposed in unrelated data breaches via malware on your device or if you have at any point used that same password on any other website that has been breached.

 

Some of these posts have to be wrong.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
  • Featured Comment

Back in September 2015, the forum was breached. At the time, everyone was notified (via email, as well as discussion on either the wan show or the wan aftershow), and everyone's passwords were reset.

 

We are looking into this further, but the initial indications are that this is just the data from that breach finally surfacing publicly.

 

If anyone has data to suggest otherwise (eg accounts created after that date), please do let me know.

HTTP/2 203

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

Hey everyone

Hope you are well, I don't know if this has been noticed by anyone else but I am curious, I have received a dark web monitoring report from Google saying that my email and username has been leaked from a LTT data breach with the 21st Feb on it.

So I am curious has this happened to anyone else

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

there was a data breach like 6 years ago.
there most likely was not one yesterday.
I would be very sus about if that mail was actually from google since your user is too new

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

More context

Current Network Layout:

Current Build Log/PC:

Prior Build Log/PC:

Link to comment
Share on other sites
Link to post
Share on other sites
Posted

wow that's scary. How do I know if my account is leaked?

Microsoft owns my soul.

 

Also, Dell is evil, but HP kinda nice.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
1 hour ago, Gat Pelsinger said:

wow that's scary. How do I know if my account is leaked?

You can plug your email address into this tool to find out.

 

However, the source of this "new" leak seems to be another checking tool that collected old leaks. There was a cybersecurity incident on the forums years before either of us joined, which that tool had cached. That old data seems to be included in this new leak.

 

The best thing you can do is follow good password practices. Never use the same password on multiple websites. If you want to be extra safe, enable two-factor authentication from the user control panel.

I sold my soul for ProSupport.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
  • Author

Just to put everyone's mind at ease about my personal situation, I already reset my password and enabled 2FA. The password that was leaked is also not in use any longer (as of a long time ago), and all of my passwords are random strings. No password is reused, they're all 14+ characters, upper/lower/number/special/etc.

 

I don't believe my current information was leaked, but given the potential severity if there was another breach, I'm glad @colonel_mortis is looking into it further. Chances are, Google is just late to the party, but it doesn't hurt to check.

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
On 2/22/2024 at 8:44 PM, Ensarda said:

Hey everyone

Hope you are well, I don't know if this has been noticed by anyone else but I am curious, I have received a dark web monitoring report from Google saying that my email and username has been leaked from a LTT data breach with the 21st Feb on it.

So I am curious has this happened to anyone else

Your thread has been merged with another about same subject.

^^^^ That's my post ^^^^
<-- This is me --- That's your scrollbar -->
vvvv Who's there? vvvv

Link to comment
Share on other sites
Link to post
Share on other sites
Posted
  • Featured Comment

Just an update, Linus made a quick announcement on WAN show last night and can be found here:

 

 

Community Standards | Fan Control Software

Please make sure to Quote me or @ me to see your reply!

Just because I am a Moderator does not mean I am always right. Please fact check me and verify my answer. 

 

"Black Out"

Ryzen 9 5900x | Full Custom Water Loop | Asus Crosshair VIII Hero (Wi-Fi) | RTX 3090 Founders | Ballistix 32gb 16-18-18-36 3600mhz 

1tb Samsung 970 Evo | 2x 2tb Crucial MX500 SSD | Fractal Design Meshify S2 | Corsair HX1200 PSU

 

Dedicated Streaming Rig

 Ryzen 7 3700x | Asus B450-F Strix | 16gb Gskill Flare X 3200mhz | Corsair RM550x PSU | Asus Strix GTX1070 | 250gb 860 Evo m.2

Phanteks P300A |  Elgato HD60 Pro | Avermedia Live Gamer Duo | Avermedia 4k GC573 Capture Card

 

Link to comment
Share on other sites
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing General Discussion

×