Hacker News Reader

Would be safer to just change your passwords. If they are old, even better to change them right now.

I have 388 items in my password manager. 138 of them use my email address which was found in this breach :(

Not that you're wrong, but there is no reasonable way to rotate all of those. I guess I'll have to spend a few hours manually going through the ones I care about and rotating them?

Understanding which of your accounts is valuable, and which isn't, is a worthwhile task in itself.

Is that the point? People want to know the source. I have rights under the GDPR that companies should be treating my data securely. I want to know who was compromised.

This particular dataset appears to have been collected by malware. So it wasn't a breached company, it was malware on some machine that impacted users used that logged usernames/passwords.

That's also useful as it might lead to clues to identifying a potentially compromised machine

I think the same malware that had breached my data awhile ago "Polish Credentials" is apart of this because the same old user:pass pairs so maybe its a bunch of data from multiple breaches if you were in the polish breach it dumped your google saved passwords so that would be whats affected

Reply on news.ycombinator.com