Email and password on sale on darkweb
FIXED- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- :
- Re: Email and password on sale on darkweb
03-01-2018 4:58 PM - edited 03-01-2018 5:00 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Experian have informed me that my email and password for plusnet is now freely available for people to buy on the darkweb.
i was wondering if someone could advise me how this could happen, I imagine there is some record of the login attempts made.
Being that my stuff is all up to date in regards to security, perhaps you've had someone gather this info from yourselves or is it an inside job ?
many thanks.
ps after the worse home move experience I had recently ,this just about kisses our business together good bye.
Fixed! Go to the fix.
Re: Email and password on sale on darkweb
03-01-2018 7:38 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Email and password on sale on darkweb
04-01-2018 9:27 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
If I remember correctly, Experian where hacked a little while ago. At a total guess I suspect they are saying that your experian username (email address) and password where taken and are available, rather that your Plusnet details, though if that is a Plusnet email address and you use the same password for both then it would amount to the same thing.
It would definitely be safest and certainly wouldn't do any harm (other than take a bit of your time), to go through and change the passwords anywhere that you've used that same password.
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
Re: Email and password on sale on darkweb
04-01-2018 9:35 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Done straight away, but there seems to be some serious security issues with plusnet
some digging has revealed this article where someone has had full passwords relayed back to them, something which is very, very wrong.
https://www.grahamcluley.com/plusnet-isnt-acting-safely-password/
If true this is a huge flaw in the way plusnet store passwords, and has been since before 2015
to note today my plusnet router is now unconnected from broadband over night, yet we have no outages in the area.
Im now deeply concerned by plusnets activity, and will be taking this further.
Re: Email and password on sale on darkweb
04-01-2018 9:38 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Email and password on sale on darkweb
04-01-2018 9:41 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
![](/skins/images/64C4A2875EC2876CA55B4064327649DF/responsive_peak/images/icon_anonymous_message.png)
Re: Email and password on sale on darkweb
04-01-2018 9:42 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Re: Email and password on sale on darkweb
04-01-2018 9:49 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
@Anonymous, ah yes you're right. The Experian hack was a couple of years ago: https://www.theguardian.com/business/2015/oct/01/experian-hack-t-mobile-credit-checks-personal-information
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
![](/skins/images/64C4A2875EC2876CA55B4064327649DF/responsive_peak/images/icon_anonymous_message.png)
Re: Email and password on sale on darkweb
04-01-2018 9:53 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Even then that hack was only in the USA and limited to T-Mobile Credit Checks, so I don't think this will be related to the OPs issue.
Re: Email and password on sale on darkweb
04-01-2018 9:54 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
this is a quick check - just put in your username https://haveibeenpwned.com/
Re: Email and password on sale on darkweb
04-01-2018 9:56 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Yes @Anonymous. As I said earlier I was just working from memory, so obviously mis-remembered the details
Superusers are not staff, but they do have a direct line of communication into the business in order to raise issues, concerns and feedback from the community.
04-01-2018 3:55 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
We take the responsibility of protecting our customers’ data extremely seriously and as a result have thoroughly investigated these claims. We can guarantee that the compromise of your email address was absolutely not from Plusnet. With regards to the password, Experian shouldn’t be able to tell if it is compromised as this would mean they know it. Our security team would be happy to chat to you about online safety and we have messaged you separately to discuss how we can help you.
Re: Email and password on sale on darkweb
04-01-2018 5:14 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Hi Matthew
Experian don't have knowledge of the password, judging from the report sent to me by them, neither does the person selling the information.
Yes, basic online security was observed, no reusing passwords, or storing on devices.
I would like to say a big huge thanks to those who spent time investigating this issue, along with the very knowledgeable gentleman who phoned me to clarify the issue, with the findings of the investigation.
Very hugely appreciated
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- :
- Re: Email and password on sale on darkweb