Troy Hunt

JANUARY 29, 2024

That's the analogy I often use to describe the data breach "personal stash" ecosystem, but with one key difference: if you trade a baseball card then you no longer have the original card, but if you trade a data breach which is merely a digital file, it replicates.

Data breaches 276

Data breaches Passwords Advertising Personal Security 276

Identity IQ

MAY 13, 2024

What Are the Risks of a Data Breach? IdentityIQ In a society dominated by digital interconnectedness, the risks associated with data breaches loom over individuals, businesses, and society at large. The ramifications extend past financial losses due to personal, corporate, and regulatory privacy being at risk.

Data breaches 52

Data breaches Risk Identity Theft Passwords 52

Troy Hunt

NOVEMBER 7, 2018

The first one was about HSBC disclosing a "security incident" which, upon closer inspection, boiled down to this: The security incident that HSBC described in its letter seems to fit the characteristics of brute-force password-guessing attempts, also known as a credentials stuffing attack.

Passwords 236

Passwords Accountability Hacking Education 236

Malwarebytes

JANUARY 31, 2024

On January 23, 2024, we reported on the discovery of billions of exposed records online, now commonly referred to as the “ mother of all breaches ” (MOAB). Since then, the source of the dataset has been identified as data breach search engine Leak-Lookup. But it does nothing to enforce that restriction.

Data breaches 126

Data breaches Identity Theft Passwords Internet 126

SC Magazine

MAY 6, 2021

Today’s columnist, Jasson Casey of Beyond Identity, offers a path for security teams to move off shared secrets and embrace a passwordless world. It’s World Password Day, do the company’s users still rely on passwords? Has the security team replaced them? Eliminate passwords.

Passwords 54

Passwords Authentication Identity Theft Risk 54

Troy Hunt

JANUARY 8, 2019

Very often, those addresses are accompanied by other personal information such as passwords. Clearly a Spotify breach, right? No, and the passwords are the very first thing that starts to give it all away. The attack is simple but effective due to the prevalence of password reuse. Billions of them, in some cases.

Hacking 223

Hacking Passwords Accountability Data breaches 223

Troy Hunt

JANUARY 16, 2019

Many people will land on this page after learning that their email address has appeared in a data breach I've called "Collection #1". Collection #1 is a set of email addresses and passwords totalling 2,692,818,238 rows. It's made up of many different individual data breaches from literally thousands of different sources.

Data breaches 280

Data breaches Passwords Password Management Accountability 280