Technology

63375 readers

4538 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

316

Have I Been Pwned adds 284M accounts stolen by infostealer malware (www.bleepingcomputer.com)

submitted 3 days ago by [email protected] to c/[email protected]

30 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 13 points 2 days ago (7 children)

I don't understand how to find out which specific sites had my data leaked. Without that I can't take any action. I'm subscribed to email alerts but the alert did not include any details like the article said it would.

[–] [email protected] 17 points 2 days ago (2 children)

Use the 'Notify me' option and verify your email address, and then it will show the expanded list of domains that were exposed from the malware:

[–] [email protected] 1 points 2 days ago* (last edited 2 days ago)

Thanks, I finally found it. I was already subscribed and verified, but still couldn't find this anywhere. To get to it I had to:

Signup again from the HIBP website
Get the verification email telling me I was already verified
Click through it
Scroll to the VERY bottom of the page and find the stealer logs.

My natural question is of course how my credentials were stolen logging into gmail.com (yay 2-factor), but at least know I know that's where I need to change my password.

I should note that the initial notice email about the breach that I received from HIBP for already being verified appears to not have any direct way to actually get this information.

[–] [email protected] 1 points 2 days ago (1 children)

Mine just said it was found, but no domains were associated. So... Yea. I don't know what it has, and the inability to query it for more information sucks.

[–] [email protected] 1 points 2 days ago

You're not alone. I'm on the list, but no domain data and I don't have the 'stealer log entries' available.

load more comments (4 replies)