this post was submitted on 26 Feb 2025
316 points (99.1% liked)

Technology

63375 readers
6574 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
316
Have I Been Pwned adds 284M accounts stolen by infostealer malware (www.bleepingcomputer.com)
submitted 3 days ago by [email protected] to c/[email protected]
30 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 13 points 2 days ago (7 children)

I don't understand how to find out which specific sites had my data leaked. Without that I can't take any action. I'm subscribed to email alerts but the alert did not include any details like the article said it would.

[–] [email protected] 17 points 2 days ago (3 children)

Use the 'Notify me' option and verify your email address, and then it will show the expanded list of domains that were exposed from the malware:

[–] [email protected] 1 points 2 days ago* (last edited 2 days ago)

Thanks, I finally found it. I was already subscribed and verified, but still couldn't find this anywhere. To get to it I had to:

  • Signup again from the HIBP website
  • Get the verification email telling me I was already verified
  • Click through it
  • Scroll to the VERY bottom of the page and find the stealer logs.

My natural question is of course how my credentials were stolen logging into gmail.com (yay 2-factor), but at least know I know that's where I need to change my password.

I should note that the initial notice email about the breach that I received from HIBP for already being verified appears to not have any direct way to actually get this information.

load more comments (2 replies)
load more comments (5 replies)