New massive Data Breach involves 700 million email accounts

Data breach Hacker news:
Discover if you e-mail is hacked!

Recently, security experts have found one of the biggest massive hackings in history to email accounts. The hack involves more than 700 million unique emails and about 22 million unique passwords. How to know if your email account is compromised? Find it out here.

When was the last time that you changed your password? If you are one of those who use a single password to access all online service, your security and privacy may be at risk.

Recently, Troy Hunt, a cybersecurity expert discovered that around 87 GB of confidential information was leaked online. The most serious part of the case is that there is a good chance that you are among the victims of this hack.

These tons of stolen credentials were stored in the cloud with the title "Collection # 1". In this file, Hunt found 772,904,999 email addresses and 21,222,975 passwords stolen. According to Hunt's first research, the scary amount of leaked credentials was stored for several years. The probe: he found email accounts dating back to 2008.

It is believed that hackers used two thousand different sources to obtain the data. What makes this massive data breach potentially dangerous is that it allows a hacker or cracker to create about 1.16 billion unique combinations of passwords and email accounts through the credential stuffing technique. This technique consists of using bots that blast multiple services with a single set of login credentials.

What should I do to know if my credentials are compromised?

Before you panic, the Troy Hunt website offers two search tools to check if your email account and password have been hacked. Go to Have I been pwned to check if your email was leaked or visit Pwned passwords to discover if your password appears in the unfortunate list.

If you are one of the lucky ones who managed to escape this massive data breach, congratulations! If not keep calm, not everything is lost. Even if your credentials appear in Collection # 1 you can still be on time to protect your accounts. Of course, the first step is to change your passwords immediately.

Why? The fact that your credentials have been stored in Collection # 1, does not imply that hackers have immediately accessed your email account. Before doing so they must get the password and the email address to match through cracking tools, as we mentioned earlier.

This means that Collection # 1 is like a large database of credentials available for cybernetic hackers to try to login to different online services.

When a data breach of this magnitude occurs, normally the affected services suffer unusual peaks of traffic. This means that several login attempts are executed by bots who are trying different login combinations.

Distil Networks, a bot security company discovered that several websites experienced three times more login attempts after the massive data breach.

Tips for a safe password

  • If you have a unique password for all your accounts and service, reset all the passwords immediately. Hackers know that there are big chances to access all your accounts with a unique password. Most users reject this obvious step and persist in keeping the hacked password in their other accounts.
  • Use different passwords when you go buying online. If you use the same password to log in in different online stores, the risk to become a victim of electronic fraud is enormous. Especially because online shops generally offer their customers the option to store in their system confidential data such as credit card numbers and address to make purchases faster each time the user goes buying.
  • Improve your email password. Most online services use your email account to reset or modify passwords, if your email account is hacked, you could lose access and control of other online services.
  • If you are going to change your password, don’t follow the structure of the previous one. Your password will still vulnerable if you just change a number or a letter. Security experts say that there is nothing worse than reusing passwords or modify them slightly.

Why should you worry?

Nowadays many online services ask you to log in with your email account. Taking into account this situation, you can imagine how many of your accounts are in danger if you are one of those who use a single password to access all those services.

For this reason, it is urgent that you replace your password with the safest one. Use different passwords in each one of your online accounts. You can do this through password managers like the iCloud keyholder.

5 biggest data breaches in the last 18 years

Among the most famous cases of Data breach is one that involves Marriot. After a failure in protecting their customers' data, nearly 500 million guests suffered the theft of personal information in a hacker attack. The danger of these thefts of information depends on the type of data involved. Just imagine the panic that generated the theft of more than 143 million social security numbers in the Equifax data breach occurred in 2017.

Most famous Data Breaches:

Marriot: 500 million affected customers
Equifax: 143 million customers affected
Adult Friend Finder: 412 million clients affected
eBay: 145 million clients affected
Yahoo: 3 billion users affected.


The right place for your data