What should i do about Synthient Credential Stuffing Threat Data

DorsetDave3

I have received an email from Have I been Pawnd which I am signed up to to say that 2 billion email addresses have been compromised. Do i  need to change my password ?

NB I have been a member of this Forum for at least 10 years [DorsetDave, 1,2,3] but it says I can't post a link ! ]

Neil_Jones

DorsetDave3 said:

I have received an email from Have I been Pawnd which I am signed up to to say that 2 billion email addresses have been compromised. Do i  need to change my password ?

Read the linked article in the email.  This is a combination of previous data hacks all shoved together to make one new one (effectively).  the attacker just used the previous data sets from different data breach sources from eons ago And hence you just can't pinpoint the exact organisation that got breached.

Pawnd has a search option to see if a password you've used has been featured in a breach and if you use that password anywhere, go and change it.

TL;DR - if you've been regularly changing passwords then you should be okay.

victor2

DorsetDave3 said:

...

NB I have been a member of this Forum for at least 10 years [DorsetDave, 1,2,3] but it says I can't post a link ! ]

Your current profile says you've been a member since 2020, but have only made 3 posts, so that may be why you can't post a link yet. The system won't link 3 to 1 and 2

Eyeful

I hope you are now using a good quality Password Manager to generate & store your passwords,
Two good free PWM's are (a) Bitwarden (b) Proton PWM.

I suggest:
 
1.For the email address you have been notified of, just generate and change the password for a long and complex one (say 20 characters at lest) then store it in the PWM.

2. Make sure you use a different password of each website you sign into.

3. If you what extra security, also use some form of 2FA.