Amazon account hacked, how to contact??

greenbee

This happened to me yesterday - I only found out because messages showed on the app on my phone. I couldn't log into my account using my password, only fingerpting ID on the app, so I cancelled the order and called amazon. They dealt with it (although didn't how much sense of urgency, so I also cancelled the credit card associated with the account).

Logging into webmail (something I rarely do) showed that amazon emails were going into deleted items before getting to any of my mail applications so I have changed passwords on all my email accounts not just the one I know was compromised and I have also started changing the email account associated with any other accounts that used that one (and their passwords).

Looks like the LinkedIn data breach was the culprit and I'd reused a password...

I'm now feeling slightly paranoid and wondering what else I should be doing.

I can see myself getting a lot of passwords wrong over the next few weeks!

takman

Katykat wrote: »

I did this check and it told me that I have been pwned on one site but of course doesn't give details unless I subscribe to the full site. What does this mean and is it enough that I have changed my Amazon password. I didn't want to change my email address really.

You don't need to change your email address just your passwords. I use a different password for every site I use that has payment details or detailed information about me. I also forgot to mention that Amazon also has Two Factor Authentication. If your enable this then that means nobody can access your account on a new device even if they have your password.

takman

greenbee wrote: »

This happened to me yesterday - I only found out because messages showed on the app on my phone. I couldn't log into my account using my password, only fingerpting ID on the app, so I cancelled the order and called amazon. They dealt with it (although didn't how much sense of urgency, so I also cancelled the credit card associated with the account).

Logging into webmail (something I rarely do) showed that amazon emails were going into deleted items before getting to any of my mail applications so I have changed passwords on all my email accounts not just the one I know was compromised and I have also started changing the email account associated with any other accounts that used that one (and their passwords).

Looks like the LinkedIn data breach was the culprit and I'd reused a password...

I'm now feeling slightly paranoid and wondering what else I should be doing.

I can see myself getting a lot of passwords wrong over the next few weeks!

I would also recommend that you use Two Factor Authentication on any important websites that offer it. I also use it on all my email addresses so nobody can log into them either.

greenbee

takman wrote: »

I would also recommend that you use Two Factor Authentication on any important websites that offer it. I also use it on all my email addresses so nobody can log into them either.

Agreed... I've been lazy about this :cool:

Mind you, it was hard enough to find out how to change some of the passwords without locating the additional options! The latter should keep me busy today.

greenbee

So I've been going through and sorting out all my accounts... and I have some work to do. I have a few old tiscali accounts from when I used to use them as an ISP. I can't actually work out how to add two-factor authentication to them, so clearly need to drop them.

I also need to fix the problems with my BT account in that it no longer recognises by BT email account, and more importantly my password for the BT SMTP account!

A bit of research on options for secure and longterm email accounts sounds like it's on the cards this weekend!

Katykat

I called Amazon & they have now passed it to their security breach dept who are supposed to contact me today. I've done some cleaning up of my security data but can't change my hotmail password until that changed security data has been in place for 30 days (????). I've also requested new debit & credit cards. So hopefully this should help. I will go into the two factor authentication too.

takman

Katykat wrote: »

I called Amazon & they have now passed it to their security breach dept who are supposed to contact me today. I've done some cleaning up of my security data but can't change my hotmail password until that changed security data has been in place for 30 days (????). I've also requested new debit & credit cards. So hopefully this should help. I will go into the two factor authentication too.

Did you have incorrect security info on your hotmail account?. You usually don't have to wait 30 days if you have a second email address or mobile number they can use to verify it's you that's changing the info and not someone trying to gain access to your account.

glentoran99

Katykat wrote: »

I have a Mac so it should be OK. But I don't often use it. I use IPad.

What makes you think that?