Loading…
15
Am I the only one who checked the same leak on 37 sites and 36 of them were fine?
Last week I ran through my whole bookmarks list to see how many sites leaked my email to third parties, and the number that came back clean was 36 out of 37. The one that failed was a forum I signed up for back in 2019 and forgot about. It had my old address and password sitting in plain text in their database, which means anyone who grabbed that dump has both. Here is the part that got me: I never would have caught it without checking, because the site still works fine and never told me a thing. So what is your go to for finding old accounts like this, do you just run your email through one of those breach checkers or do you do it manually?
1 comments
Log in to join the discussion
Log In1 Comment
paige8624d ago
The manual part is what gets people, because breach checkers only catch dumps that got posted somewhere public, like the 2019 forum one you found. Take that same email and run it through a password manager's dark web scan or just search it in your inbox for old welcome emails and password reset messages. I did this last month and found three accounts I forgot about: a recipe site from 2016, a fitness app I used once, and some survey thing that paid me a $10 gift card. Each one had a different old password I had reused elsewhere, so now I just delete the account instead of changing the password, since a closed account can't leak anything.
6