Posted July 08, 2016
![micktiegs_8](https://images.gog.com/01de210e02161be8c9ccdb2844507cc9791ca9230228fb7b2df461699a1f41e8_forum_avatar.jpg)
micktiegs_8
Pre-Galaxy GOGizen
Registered: Sep 2010
From Australia
![Emob78](https://images.gog.com/2659d760c55cdbe8be368e39fe26dd44d4f80ff5cc5272946f0c835828286d57_forum_avatar.jpg)
Emob78
jack and coke plz
Registered: Dec 2012
From United States
![micktiegs_8](https://images.gog.com/01de210e02161be8c9ccdb2844507cc9791ca9230228fb7b2df461699a1f41e8_forum_avatar.jpg)
micktiegs_8
Pre-Galaxy GOGizen
Registered: Sep 2010
From Australia
![Emob78](https://images.gog.com/2659d760c55cdbe8be368e39fe26dd44d4f80ff5cc5272946f0c835828286d57_forum_avatar.jpg)
Emob78
jack and coke plz
Registered: Dec 2012
From United States
Posted July 08, 2016
![avatar](http://images.gog.com/2659d760c55cdbe8be368e39fe26dd44d4f80ff5cc5272946f0c835828286d57_avm.jpg)
![avatar](http://images.gog.com/01de210e02161be8c9ccdb2844507cc9791ca9230228fb7b2df461699a1f41e8_avm.jpg)
And considering that the joke is coming from me, that would most definitely be a waste of special cream. There, I gave you your very own comeback. Thank you, your welcome, and good day, sir!
![Breja](https://images.gog.com/e5ad41d5686d009d9f3c4c651d6e66bcc79cf6f38c2ac94e627274817f20a70b_forum_avatar.jpg)
Breja
You're in my spot
Registered: Apr 2012
From Poland
![BlackThorny](https://images.gog.com/ace837cd247672b490070d3b4e9bc2cc4bf2d3c24e9aa20c4a4f229b7d08de8c_forum_avatar.jpg)
BlackThorny
New User
Registered: Dec 2011
From Israel
Posted July 08, 2016
![avatar](http://images.gog.com/01de210e02161be8c9ccdb2844507cc9791ca9230228fb7b2df461699a1f41e8_avm.jpg)
[start]
You've been pwned!
You signed up for notifications when your account was pwned in a data breach and unfortunately, it's happened. Here's what's known about the breach:
Breach: Neopets
Date of breach: 5 May 2013
Number of accounts: 26,892,897
Compromised data: Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names, Passwords, Usernames
Description: In May 2016, a set of breached data originating from the virtual pet website "Neopets" was found being traded online. Allegedly hacked "several years earlier", the data contains sensitive personal information including birthdates, genders and names as well as almost 27 million unique email addresses. Passwords were stored in plain text and IP addresses were also present in the breach.
[end]
Other known sites I've been cited at were Forbes (just signed up to comment once), Raptr (signed up for some GOG promotion regarding Witcher 3) and apparently Ashely Madison. Funnily, I asked AM's support staff why my email had been flagged and they responded with 'there is no email verification on our site'... well, problem solved haha! To test the theory I signed up there as a female using my gmail and sure enough, I didn't get a verification sent to it.
Added a picture to show what I mean, but for some reason it doesn't show a few sites I was previously notified about.
It wasn't "gamified". I was reluctant to use it as I figured it could be a scam just to get my email address for spam...
Eventually I used it and all but one email was reported as being clean, the one that did list had just one incident.
Now I've checked a couple of email addresses and all turned out clean, including that one that was listed previously... How so?
I finally used it
![Vythonaut](https://images.gog.com/8e0b4cae861e3d1b6762494462e325d1198f6341dcea2acb155ccbc64479adfc_forum_avatar.jpg)
Vythonaut
Per aspera ad astra
Registered: Jun 2014
From Greece
Posted July 08, 2016
The problem with this site (and it is a BIG F$@#ING problem as it has to do with privacy) is that you can check out any mail you want, without needing a two-step authentication. And why is this a problem? Well, let's look an example, for those who don't yet understand what's on stake:
You have a good friend who's married. Their mail is myfriend@xxxxxx.net (hope this doesn't exist :P). They happen to be subscribed to ashleymadison. Of course you aren't supposed to know that, it's personal & sensitive information about themselves and they never told it to anyone. Who stops you entering *their* email and seeing this piece of information?
And the answer of course is noone!
This website does not care if the email you entered is actually yours so in reality, we have another data breach (info about how you spend your time on the internet - adult sites, gaming sites etc), provided that you have been subscribed to any of the 120 websites that have already been breached.
Your thoughts?
You have a good friend who's married. Their mail is myfriend@xxxxxx.net (hope this doesn't exist :P). They happen to be subscribed to ashleymadison. Of course you aren't supposed to know that, it's personal & sensitive information about themselves and they never told it to anyone. Who stops you entering *their* email and seeing this piece of information?
And the answer of course is noone!
This website does not care if the email you entered is actually yours so in reality, we have another data breach (info about how you spend your time on the internet - adult sites, gaming sites etc), provided that you have been subscribed to any of the 120 websites that have already been breached.
Your thoughts?
![sunshinecorp](https://images.gog.com/0ed013fd363e74b82b3aa32d52ab5b3968efe937b6ccd9f837c5cfce2801f62f_forum_avatar.jpg)
sunshinecorp
Ordained Dudeist
Registered: Jul 2011
From Greece
![Vythonaut](https://images.gog.com/8e0b4cae861e3d1b6762494462e325d1198f6341dcea2acb155ccbc64479adfc_forum_avatar.jpg)
Vythonaut
Per aspera ad astra
Registered: Jun 2014
From Greece
![micktiegs_8](https://images.gog.com/01de210e02161be8c9ccdb2844507cc9791ca9230228fb7b2df461699a1f41e8_forum_avatar.jpg)
micktiegs_8
Pre-Galaxy GOGizen
Registered: Sep 2010
From Australia
Posted July 09, 2016
![avatar](http://images.gog.com/1e4a996a1d1fa7bf7bda0560f50f84c9decc09dca8117d454da67aba2fea9302_avm.jpg)
You have a good friend who's married. Their mail is myfriend@xxxxxx.net (hope this doesn't exist :P). They happen to be subscribed to ashleymadison. Of course you aren't supposed to know that, it's personal & sensitive information about themselves and they never told it to anyone. Who stops you entering *their* email and seeing this piece of information?
And the answer of course is noone!
This website does not care if the email you entered is actually yours so in reality, we have another data breach (info about how you spend your time on the internet - adult sites, gaming sites etc), provided that you have been subscribed to any of the 120 websites that have already been breached.
Your thoughts?
Those sites that showed up on mine didn't just show up instantly after entering my email lol... I told it to notify me, and they eventually notified me over a period of a few months.
What you're explaining might happen in some places though... who cares? Only the people who actually have to hide anything in the first place, that's who. This was merely a fun post... there's no need to get all serious about it GOGlin.
![BlackThorny](https://images.gog.com/ace837cd247672b490070d3b4e9bc2cc4bf2d3c24e9aa20c4a4f229b7d08de8c_forum_avatar.jpg)
BlackThorny
New User
Registered: Dec 2011
From Israel
Posted July 09, 2016
![avatar](http://images.gog.com/1e4a996a1d1fa7bf7bda0560f50f84c9decc09dca8117d454da67aba2fea9302_avm.jpg)
You have a good friend who's married. Their mail is myfriend@xxxxxx.net (hope this doesn't exist :P). They happen to be subscribed to ashleymadison. Of course you aren't supposed to know that, it's personal & sensitive information about themselves and they never told it to anyone. Who stops you entering *their* email and seeing this piece of information?
And the answer of course is noone!
This website does not care if the email you entered is actually yours so in reality, we have another data breach (info about how you spend your time on the internet - adult sites, gaming sites etc), provided that you have been subscribed to any of the 120 websites that have already been breached.
Your thoughts?
![avatar](http://images.gog.com/01de210e02161be8c9ccdb2844507cc9791ca9230228fb7b2df461699a1f41e8_avm.jpg)
Those sites that showed up on mine didn't just show up instantly after entering my email lol... I told it to notify me, and they eventually notified me over a period of a few months.
What you're explaining might happen in some places though... who cares? Only the people who actually have to hide anything in the first place, that's who. This was merely a fun post... there's no need to get all serious about it GOGlin.
Even though it said I wasn't on the site? And it wasn't mentioned just because I didn't sign to notify?