It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
So I've been using Credit Karma for a while now (it's a site that lets you keep a close eye on your credit) and recently they added a section for identity monitoring — essentially letting you know which breaches your info was lost in.

I was breached 5 times: https://imgur.com/Hv3Xniy

Anyone see a pattern there?
avatar
Yeah. If you take all of the capitalized letters and rearrange them, it spells "Decor Puddle Sword." Shenanigans are clearly afoot.
Is that the scent of aluminum I sense? Or perhaps tin, if your hat is a bit more old fashioned?

4.7 billion is a large number. That's larger a number as the lifespan of Sol to this day. 4.7 billion is also nearly half the world population.

These breaches affect, maybe a few hundred thousand at most (as I'm sure you'd notice from checking the details).

What I'm trying to say is that rather bluntly, the chances of you being directly affected by these breaches are of such a small quantity as to be within the margin of error of statistical insignificance.
Strange. Apart from three of them, they all happened in july.
avatar
Why did you wait 2 years to post this here?
I used to be a video gamer, then I took an arrow to the knee...
low rated
avatar
avatar
samuraigaiden: Why did you wait 2 years to post this here?
Maybe,he only just got the info from them.That happens when you don't visit/sign in for a period.
avatar
HeathGCF: I used to be a video gamer, then I took an arrow to the knee...
Was it Bilbata Oil, Breeze, DMZ, or something weirder?
avatar
avatar
samuraigaiden: Why did you wait 2 years to post this here?
Perhaps they had jerkmuter'd him.
avatar
avatar
samuraigaiden: Why did you wait 2 years to post this here?
I got this report today, so I posted it today. Would have been a bit difficult to post it before I'd gotten it.
That is strange. Usually it is credit card companies that behave this way for obvious reasons.
avatar
USERNAME:samuraigaiden#Q&_^Q&Q#GROUP:4Why did you wait 2 years to post this here?
avatar
Here you go:

https://haveibeenpwned.com/

It's one of the websites I point my moms to.

It's also one of the reasons we teach them what a plus email address is, how to use it, and encourage them to do so so that stolen records are harder to trace between hacks since the email addresses don't show up as matching.
How about gaming companies that require that you give them your "real" name (by which they mean legal, which doesn't always match one's real name) and won't let you change it without showing legal ID? (Blizzard is guilty here.)

Even putting aside that many people don't want to go by their legal name (for various reasons), or that many people change their legal names (for various reasons, marriage being just one of them), there's the fact that having the legal name there increases the risk of identity theft, particularly if the company's servers are breached.

(A Google search reveals that, apparently, some people were disqualified because their "real" name on their bnet acounts didn't match the name on their legal ID cards.)
Hmm.... I've been "pwned" in Funimation, QuinStreet and Malwarebytes breaches. Ah well.

Edit: another of my email addresses has been "pwned" in, among others, Avast forums. What is it with anti-virus sites and sucky security?
Post edited March 21, 2018 by kalirion
avatar
kalirion: Edit: another of my email addresses has been "pwned" in, among others, Avast forums. What is it with anti-virus sites and sucky security?
Just for reference:

https://blog.avast.com/2014/05/26/avast-forum-offline-due-to-attack/

I see lack of security all the time. A few months ago, I was working with a company that sends overdue notices via a third party via SMS messages. I got curious, fired up a netstat and noticed the data was being transferred insecurely.

I fired off an email to their public contact account as they didn't have a security contact listed.

Their response was to point out that their website had a SSL certificate (Which only rated a C per that test I use over at ssllabs.com) and therefore everything was secure.

A few months ago with a local client I was helping out at, I noticed their checks were being processed over the net with a website that didn;t even have a security certificate. I was told "Well it has a login..."