Collection #1 data breach

QlimaxUK · 17 Jan 2019 at 17:48

Don't know too much about this so I will post as I understand it...

So there has been a big email/password dump on a hacker forum (plain text format) millions of users maybe affected check https://haveibeenpwned.com/ to see if your on the list I will post news sources below:

https://www.forbes.com/sites/kateof...to-find-out-if-your-password-has-been-stolen/

https://bit-tech.net/news/tech/software/773-million-credentials-leaked-in-collection-1-database/1/

https://motherboard.vice.com/en_us/...tion-one-data-breach-password-hack-what-to-do

My question is, does anyone know if these are Email/Password combo's or separate emails AND passwords that are unconnected to each other and where did this data actually come from?

QlimaxUK · 17 Jan 2019 at 17:53

but whats the source?

QlimaxUK · 17 Jan 2019 at 18:21

I do use separate password for most things I have just changed the pw for my 'main email' just in case

QlimaxUK · 17 Jan 2019 at 18:40

This is a tricky one as it doesn't actually tell us exactly which online services have been breached to get this data so all I can do is change the email account pw so they can't use that to reset the accounts they might want and do a lockout and I don't want to have to change every single account I have tied to this email + as mad as it sounds if I did get one of my 'web service accounts' hacked then at least I would know which service they got the email from and would know which password has been 'got'

QlimaxUK · 17 Jan 2019 at 19:13

VincentHanna said:
HIBP has a password checking bit if you are worried.

https://haveibeenpwned.com/Passwords

YES I did see that part but call me paranoid but I don't trust that part as the log file of the query form on that site could get hacked and they will get your password that way

QlimaxUK · 17 Jan 2019 at 19:27

but I have already entered an email to that site so I am not giving them a password too