Gmail, Yahoo, Hotmail Hacker collects 272m email addresses and passwords

[#1]

Looks like quite a lot has been taken

Link To Article

You can use this site to see if you're details have been posted. https://haveibeenpwned.com/

But it only tells you if your email appears in a info dump. Account can still be compromised but the hacker hasn't dumped any info with your account details in.

Probably be best to change password just to be sure.

[#2]

Nearly everyone has at least one:-

Adobe: The big one. In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, encrypted password and a password hint in plain text. The password cryptography was poorly done and many were quickly resolved back to plain text. The unencrypted hints also disclosed much about the passwords adding further to the risk that hundreds of millions of Adobe customers already faced.

Compromised data: Email addresses, Password hints, Passwords, Usernames

[#3]

Had a look on the haveibeenpwned site and the only result was from the 000webhost one, already changed details on that one so I'm good, though my account has been getting more spam since that happened...

[#4]

The haveibeenpwned.com site must collect a lot of valid email addresses.

Of course they wouldn't sell them on would they.

[#5]

Well it's already found my main one has been had - and when i checked it last year it hadn't. I've changed the password for that now but not bothered with my gmail accounts yet - will have to do that in the next day or two.

[#6]

---

@billnotben wrote:

The haveibeenpwned.com site must collect a lot of valid email addresses.

Of course they wouldn't sell them on would they.

I'd be very surprised. The site is developed by a fairly reputable source from the infosec/tech industry.

---