Live data from Hacker News

Have I been pwned? Check if your email has been compromised in a data breach

haveibeenpwned.com

51–60 of 294 posts

Re: Have I been pwned? Check if your email has been compromised in a data breach

#51
Shit. Looks like I got caught up in the adobe breach. Let this be a lesson to all engineers in charge of such situations to implement strong security. You are partially responsible for these disasters.

I got a call from PayPal a week or two ago. It turns out somebody in Indonesia accessed my Paypal account, presumably with credentials scraped from adobe. I know, I know, shame on me for reusing passwords. Luckily no damage was done and I did a change to the strongest password I've assigned anything yet.

Great job, op (if you're the one who wrote this service) for such an amazing tool. Everyone, if you haven't already, you really should check if you've been compromised. I will be sending this to all my friends.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#52
post #30

Earlier quoted context omitted.

your email is not a secret.

No, but it can be harvested for directed attacks or spamming. Entering it would basically 'prove' it's a valid address.

On a risk / reward basis the benefit to checking here is actually pretty high.

I don't find any of several accounts I use on there, but did find a friend's email listed (and just notified him). I'd actually appreciate a way to query my mailing list in an automated fashion.

Re: Have I been pwned? Check if your email has been compromised in a data breach

#54

Who's to say these guys aren't stealing our emails?

your email is not a secret.

It's the same reason why you don't reply to spam; it confirms your email is valid. http://www.pcmag.com/article2/0,2817,2376031,00.asp

Re: Have I been pwned? Check if your email has been compromised in a data breach

#57
post #42

I tend to create a new email address for everything I sign up for. This makes a little harder to check :) EG: twitter@example.com, facebook@example.com, hackernews@example.com It also makes it a little harder for people to find me on social media. Not sure if that's a bug or a feature ;)

Same here, with completely randomized passwords 60 chars long and different emails. IM INVISIBLE!
Post reply on HN