AK DATA BREACH

[BassKulcha]

I was notified by Google that my AudioKarma password was vulnerable because of an apparent data breach of AK.

I would suggest changing your AK password, especially if it’s used on other sites...

 

[hjames]

I have NOT been so notified, but there was a breach back in October at another site I used that I shared a password with,
so at that time I updated both passwords to different ones, and its been fine since.
How recently had you updated your password previously?

 

[BamaBilly]

Out of curiosity why would google know your AK password?

 

[Hyperion]

Out of curiosity why would google know your AK password?

Google Chrome can save your account names & passwords - this is an optional thing.

And if you use your AK password for something else it might be the 'something else' that is compromised - as informed by the Google password check that is part of the system that saves your passwords.

 

[Subtraction]

one of the best things about my cassette deck
google has no idea what I am playing

 

[whoaru99]

Phishing message?

 

[BassKulcha]

Phishing message?

Nope...

 

[pustelniakr]

Paging @luvvinvinyl

 

[IPADave]

Google Chrome can save your account names & passwords - this is an optional thing.

And if you use your AK password for something else it might be the 'something else' that is compromised - as informed by the Google password check that is part of the system that saves your passwords.

I agree, this is the likely situation.

 

[Subtraction]

is this conversation on the dark web?

 

[BigElCat]

Truth is...I don't remember my AK password...Google does that for me.

So if what you see here, starts exchanging pleasantries and blowing sunshine, you might want to suspect something's going on.

 

[Mystic]

is this conversation on the dark web?

Lol... more like "on the dark side."

 

[BamaBilly]

one of the best things about my cassette deck
google has no idea what I am playing

But does your cassette player know when you’re on AK, that’s the question. This doesn’t involve streaming music

 

[hjames]

I have a small notebook I log my various passwords in -
Its kind of important once I passed 50 passwords.
The alternative is reusing passwords.
That's probably ok with low level sites you never post fiscal or personal info on,
but you may find there are less and less of those you want to risk details on ...

 

[BassKulcha]

is this conversation on the dark web?

Lol, no—but now all of our AK passwords are.

If your AK password is the same as, say, a banking or other financial password, I would change that one (and any others that are the same—) immediately.

There have been so many hacks that it's almost certain that different chunks of your identifying data are floating around on the dark web. It just takes a clever hacker (or algorithm? I don't know how these things work) to put together the pieces to really do some damage...

 

[BassKulcha]

I agree, this is the likely situation.

Unfortunately, I was notified that the breach was specifically with "Audiokarma". Perhaps this was across the board with Xenforo, dunno.

Note that sometimes it takes a little while for breached sites to know they have been breached and then still longer to inform the users—

 

[Subtraction]

all kidding aside
I had this precise scenario
started about a year ago
for the record I always decline googles asking to save any pw

so anyway I have one pw that I probably did use a bit much for various things.
admittedly using it for more than one thing is bad practice

anyway I was logging into something and got the google warning.
I made new pw's for a few places and kept the old one for one place.
so I still get the warning when I log into that one place.

as an aside.....anytime you get an email you can hover over the senders address and see the real address.
for instance it may say "PayPalHelp" but you hover over it and see something that looks like a VIN number.

regardless....do not ever log into anything from an email. even if it looks legit...even if you know it is legit.
just go to your normal address or bookmarked site whatever.
do not ever log in to anything from an email.

Im not trying to act like I know anything just my experiences.