2,800 New Data Breaches with 80M Records Added

Re:2,800 New Data Breaches with 80M Records Added by akerro on Monday February 26, 2018 @08:13AM (#16465000)

No way for me to verify it because I use different username on different sites, and I have a self-hosted catch-all email server, I would have to extract all my usernames or emails from KeePass and check each of them separately... I'm too safe to even know I was hacked.

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by wrboyce on Monday February 26, 2018 @08:21AM (#16465041)

Unless you're using unique domains, you could use the HIBP domain-wide checker at https://haveibeenpwned.com/DomainSearch.

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by mstade on Monday February 26, 2018 @08:54AM (#16465222)

I have a setup where I have unique emails for each site I register with, but they are all under a specific domain. I was wondering how I could make use of HIBP and this helps immensely – thank you for sharing!

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by PuffinBlue on Monday February 26, 2018 @08:20AM (#16465031)

That might be even more interesting actually. Seeing as you could identify the exact site that was breached. That sort of data would actually be quite valuable to this project I would surmise.

I also have a similar system now as you do, but really only for higher value accounts, not the niff naff forums stuff. And like you it's all randomly generated unique passwords so pretty safe.

None of my site specific emails have been breached yet, which is good as that would mean a major global provider had been breached.

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by icebraining on Monday February 26, 2018 @09:48AM (#16465604)

The project seems to know where the data comes from, at least in my case it identified each:

    Email 	 	Pwned sites
    dropbox@... 	Dropbox
    ffshrine@... 	Final Fantasy Shrine
    github@... 	 	GeekedIn
    linkedin@... 	LinkedIn
    patreon@... 	Patreon
    tumblr@... 	 	tumblr

(The Github one was using their OAuth - which kinda screws with the traceability)

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by akerro on Monday February 26, 2018 @09:38AM (#16465547)

> That might be even more interesting actually. Seeing as you could identify the exact site that was breached. That sort of data would actually be quite valuable to this project I would surmise.

That's why I do it.

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by jrimbault on Monday February 26, 2018 @08:30AM (#16465087)

I think that's what you want:

https://haveibeenpwned.com/DomainSearch

[ Parent | on HN ]

Re:2,800 New Data Breaches with 80M Records Added by PuffinBlue on Monday February 26, 2018 @11:32AM (#16466516)

I just checked my own domain and there are three addresses pwned that I don't use and never created. I've had the domain for years too.

Probably someone just making up an address randomly but three times is a bit odd.

[ Parent | on HN ]