I've just logged into someone else's account, using my own details?

I don't regard HIBP as a "random site", and checking a password that is only used for MN and has already been changed isn't exactly high risk

When you get right down to it, it is a hobby site which collates large amounts breach data.

It can be a very useful hobby site if you want to check an email address, but certainly not one i'd contribute my passwords to voluntarily. Even passwords which have been changed.

Incidently sharing passwords breaches T&Cs for most organisations, especially with the collation of breach data there.

@Buteo thanks for that, you have put my mind at ease. I did input my passwords there to check and was overjoyed to see no breech with 16 of them, just the one used for MN, which has been changed, was breeched.

From the earlier replies, I thought I was facing having to change ALL my passwords - but happy not to now.

My email address has been hacked too, not sure if I need to do anything about that? Do I REALLY need to change it?

gah.....I am a luddite at heart because I am too old for this new fangled technology

I've been forced out and had to log back in but I've been me all the time. If anyone else has impersonated me by accident I'd appreciate them letting me know.

I'm sure MNHQ will inform everyone anyway but I appreciate it won't be for a few hours as they're busy fixing it.

I don't regard HIBP as a "random site", and checking a password that is only used for MN and has already been changed isn't exactly high risk.

SomethingOnce you are probably right - several hundred people using the same password...... and here was I thinking I was unique:)

@MNHQ
I was logged out and now can't log back in on chrome. Explorer and my ipad are fine so I know the details are correct.
Chrome just takes the log on and then does nothing. The sign in box remains on screen but won't refresh.

@mnhq I haven't received an email, been forced to logout or anything.

What's going on?

Always best to change your password if you suspect there has been any kind of data breach

I checked my password but I had already changed it, so it is ok to check it if you change it afterwards and don’t use the password for anything else, I checked for my own interest and I had not changed that password since the last large data breach, it was ok though, no breaches

Yes, as I said above check your email addresses which is what I believe you type in. Never give your passwords out.

The password having been pwned 53 times may mean someone else has used the same one and been hacked, not necessarily that you have, right? Or have I misunderstood?

Or

Go to www.haveibeenpwned.com and select passwords from the menu. You can then put your password in and it will tell you if it's been seen.

Did you mean email address rather than password? Please don't ever put a password into a random site.

Well, dont think anyone used me as a mouthpiece but it did prompt me to check on pwned passwords, and the password I have used for MN, and MN only, has been pwned 53 times 😶

I am lazy. I have not changed it since I came here several years ago. It is my own fault, but 53 times???

All of my other passwords (i have 17 others) have not been pwned.

I deleted my account and have started a new one.

Zerof, I get those scam emails too - at least once a week. They sometimes also give my real password (from earlier widescale hacks) by the way - they have all the details from earlier hacks.

If you register with haveibeenpwned.com/ you can check if your email addresses and passwords are out there.

Mine was taken in the LinkedIn hack a while bcak for example and probably others.

The blackmail emails asking for bitcoin are usually best ignored. Mine say they have recorded me on mywebcam and I don't even have a webcam attached to my computer so clearly it is a lie and I don't use the same password now. However it is still pretty nasty and our local police had to send round an email as so many old people locally had been down to the station reporting it.

I logged in 5.30pm Tuesday on my phone on internet explorer when I noticed it was the wrong person. Logged out and it was correct when logged back in.

Cheers, Buteo

SomethingOnce

Go to www.haveibeenpwned.com and select passwords from the menu. You can then put your password in and it will tell you if it's been seen.

Just tried to login in on my phone and it doesn’t have the right password remembered but iPad does... right pain to have to reset but I’m assuming there’s a reason

My recent MN password which I only used for MN is ok on Pwned, I have just changed it anyway though

Checking on pwned my MN password shows as having been seen 3 times before.

How do you do that, Buteo?

@Buteo

I checked too and the password I only use on MN has apparently been pwned 4 times

This is really worrying. I r

I haven’t been able to preview posts using the mobile site for a few days now (Safari on iPhone running 12.1.2).

Checking on pwned my MN password shows as having been seen 3 times before. This will be one I changed to after the last data breach.

So only users who have had someone come forward to say they accessed an account other than their own are being notified?

That is NOT okay.

Everyone needs to be a aware of this breach. People need to know that their information may have been compromised. Everyone. That is not MNs decision to make.