? Security Alert! ?
There was a notice on the site earlier about a possible security breach on Subeta. Upon being alerted we moved into what we refer to as code red immediately, informing all of you to change your passwords.
Upon further inspection it appears that the hacking was incredibly isolated, and we believe from a non-Subeta attack that leaked emails and passwords from third party accounts.
As always we recommend changing your password frequently (one account hacked today hasn't been logged in to for five years, and their password was floating around!) and checking lists like Have I been PWNed to see if your personal information has been released in a hack.
Posted by Keith
Quote:
Still it's about time to change all my passwords anyway. Sigh."Good news — no pwnage found!
No breached accounts"
Looking at that site again, I've had no pastes...the 6 times I've been pwned...two unverified pwns...3 from websites (the accounts have now been deleted all together) and then that spam thing. My passwords have all been changed...and the all my accounts (like email) do have a two step log in thing anyways...I think I'm good. This is still very scary though.
changed pasword. Thank's Keith.
I hope this problem would be solved quickly. I'm PWNed 1 time :(
I hope this problem would be solved quickly. I'm PWNed 1 time :(
All 3 emails were compromised and Neopets was listed on all 3 plus some others on my main email. Changed pws with a pw generator. Is that all I need to do?
I found my email was pwned on 3 sites,those being Last.FM,MajorGeeks and LinkedIn.I guess I'll be making a new gmail account and changing the pw on those sites as well as the email.Not that I have used two of those sites in a while.I'll be checking what other web sites I still have attached to that email,and change it to the new email.
Thank you kindly for this alert. Thankfully, all my online accounts appear to have been safe, but as a cautionary measure, I changed my login info. As a rule, I never reuse passwords, as tempting as it may be (considering I'm both lazy and forgetful). Even luckier, I'd closed my Neopets account about last year, and any email addresses I'd used for the site are now defunct/deleted (I only learned of the Neopets breach recently, and had gotten rid of the associated emails due to non-related security issues), and issues on other sites were before my time, as it were.
What the hell? What does pwned mean? How do I know if I'm pwned? I'm freaking out over here.
Wow, I didn't know about that site... my main email address was "pwned" 5 times over the years ;_; Neopets, Subeta and Tumblr being the biggest ones. Yikes.
Should this maybe be linked in one of those announcement banners for a few days? It worries me that this post is getting pushed down the news page, where people might miss it.
Pwned on 2 breached sites and found no pastes (subscribe to search sensitive breaches)
How can I search more?
How can I search more?
Looks like a certain other virtual pet site got me pwned, but I'm still safe with you guys!
Thanks for the warning. It seems strange that this username has been breached somewhere. I really wonder if it's here or some other sites.
So from what I understand, Subeta itself wasn't hacked- however, one of those lists of hacked emails and passwords has been leaked somehow. So if one of those hackers got our info from another place- neopets, tumblr, etc, and we use the same log in info on subeta as we used from those sites, we could be at risk for losing our accounts? And this has happened already, some accounts have been compromised because they use the same email/password combo as other sites?
I'm grateful for the update but slightly confused and concerned as well. My username is fine but my email has been hit but is that from here or another site because it's my main email. I have been using it as a web mail but due to recent issues, I was thinking of setting my email client up to download my mail to my desktop. Now I'm not sure if it's even safe to use at all.
Well...I was long overdue anyway.
Is google a half-decent pw manager? Or should I look for something else?
Is google a half-decent pw manager? Or should I look for something else?
again a attack? mmmh, what is going on that your site is open for this so many times? is not long time ago you say we should change our pw because of a attack. mmmh, but thank you for info, so or so i change my pw from time to time
@BlueRiver
You shouldn't have to worry if you follow good guidelines to secure your account.
It's always best to change your password ASAP when something's detected in the site, just like that Cloudflare breach last time.
You shouldn't have to worry if you follow good guidelines to secure your account.
It's always best to change your password ASAP when something's detected in the site, just like that Cloudflare breach last time.
So wait if i haven't used the email for this account for years, do I still have to change the PW anyone think
So, what do I do with a one-year-old breach? I changed my password a few times since then. How do I know if I'm safe now?
I checked my email on pwned and it only listed 1 website that happened like 4 years ago and I've changed my info since that breech. What I'm not sure if I understand is, am I actually affected right now? No subeta info came up, or any other website that I use that others have claimed to have been affected on. I changed my subeta pw anyway.
@InnAmoramento - If you reused a password, I'd still recommend changing it even if the accounts have different usernames. If there's any chance at all that someone could connect the accounts based on your identity, they're still at risk as long as that password is out there.
It's a risk I'd personally never take, but ultimately it's up to you.
And I hope you never lose that paper, because that could end very badly. :x
It's a risk I'd personally never take, but ultimately it's up to you.
And I hope you never lose that paper, because that could end very badly. :x
@Virus - Obviously if you reused any of those passwords on any other accounts, then you'll still want to change passwords on the other accounts. If the dead account would have had any other personal information you want to keep safe, then you might want to go a step further and try to change that password too. Otherwise, you can probably just ignore it if you're comfortable with that. It really comes down to whether or not you would care if someone else takes control of it.
Used the site to check my email and fuck you neopets ya bastards how dare you let my email get hacked last year. I don't even use that site anymore.
Quick question
if you see a site that's been hit but you don't even use the account/go on the site at all any more what should you do? 3 sites were hit from what I seen but the thing is most of them I've not been on in years and years....
if you see a site that's been hit but you don't even use the account/go on the site at all any more what should you do? 3 sites were hit from what I seen but the thing is most of them I've not been on in years and years....
Wow, why is it doubling breaks between paragraphs? There's no reason for that post to take up so much space. :x
Quote by @InnAmoramento:
You don't have to get rid of those email addresses if you're still using them. Just make sure you change the passwords on those accounts, as well as:i have 5 email addresses i use for various stuff. it seems just 2 are safe u.u
i suppose i should get rid of at least 2 of the pwned ones u.u
A) any accounts that use the same password as a "pwned" account (because now that password has been compromised)
B) any accounts that you signed up with using those email addresses (because if someone has access to the email account, they may have used it to gain access to associated accounts)
Ideally you should already be using a unique password for every account, so if one account is compromised the damage stops there. If you reuse passwords, you'll have more work to do because now all accounts using that password are at risk.
Well my account got a new pass, i dont have to worry too much.
Its good to know always go to warring us!