Ask HN: Where was the security breach made that stole my information?

2 pointsChos8910y ago3 comments

I recently got 2 emails, one from Amazon and the other from LinkedIn, both saying that I should change my password because my email and password were posted somewhere online. There was no mention of where it was and they did't respond to my email.

Do you guys know anything that happened recently that could have caused it?

3 comments

3 comments · 1 top-level

detaro10y ago· 2 in thread

https://haveibeenpwned.com/ by @troyhunt is the trustworthy service to check your mail address against a lot of breaches.

Chos89OP10y ago

Thanks for the link, It was a hosting site that was breached. How can it be that they were able to get my password, shouldn't they encrypt it?

detaro10y ago

Hash, not encrypt. And "Should", yes. "Did" maybe not so much. Or to weak password/hashing algorithm combination, so it could be brute-forced. But if I remember the 000webhost dump was cleartext.

j / k navigate · click thread line to collapse