RE: 2014 Forum Datta Breach --No Notification from MB !!!!!

[hawki321]

According to "Have I Been Pwned [ https://haveibeenpwned.com/ ], from security researcher Troy Hunt, my current main email address in a paid for email service, among other things, was exposed/stolen in a November 2014 data breach of the Malwarebytes Forum :-(

Malwarebytes!!@! Where's my notification

[hawki321]

Is the "Have I Been Pwned" information accurate ????

[hawki321]

I have never received any notification of this event.

If the "Have I Been Pwned" report is accurate this would be a shocking instance of lack of accountability from a company that I, as well as millions of others, have considered to be one of the most honorable of Security Vendors.

 

[hawki321]

PLEASE CONFIRM OR DENY AND EXPLAIN !

[David H. Lipman]

I will confirm that not only were me notified, Malwarebytes reset our accounts.

I remember the event very well as I was one of those who reported the possibility of the breach to the Forum Administrator.

You are jumping to a faux conclusion.

EDIT:

Reference:  Pwned?

Edited September 23, 2016 by David H. Lipman

[hawki321]

Accept my apology for not having seen the notification nor having my password reset.

[hawki321]

"How to check if you've been hacked...

One to try is Have I Been Pwned [ https://haveibeenpwned.com/ ], from security researcher Troy Hunt. Simply drop your email address or login name into the box and hit enter to see if your details are listed from breaches of 142 websites...."

http://www.itpro.co.uk/security/27290/how-to-check-if-youve-been-hacked

[David H. Lipman]

No problem.

Being in a breach is a PITA.  I have been in some really nasty ones that included this one.  The site referenced also showed I was a party to an Adobe breach which I knew about but that site verified it.

I have been provided an all inclusive, paid-for, monitoring which is current subsequent to one such breach.

 

[hawki321]

"How to check if you've been hacked...

One to try is Have I Been Pwned [ https://haveibeenpwned.com/ ], from security researcher Troy Hunt. Simply drop your email address or login name into the box and hit enter to see if your details are listed from breaches of 142 websites...."

http://www.itpro.co.uk/security/27290/how-to-check-if-youve-been-hacked

[David H. Lipman]

Yahoo! just admitted they were compromised in 2014 where 500 Million accounts were affected.  Surprisingly, they are JUST admitting to it now.  The site referenced has no information on that Yahoo! breach.

I knew there was a breach based associated events which lead me to believe that there was indeed a breach.

 

Edited September 23, 2016 by David H. Lipman

[hawki321]

I stumbled upon the Pwned site in the course of my investigation of The Yahoo Calamity.

I decided to try it and was totally shocked when I saw my results.

I will review my email history, I keep a lot of stuff. I NEVER would have deleted any email respecting this matter.

[hawki321]

1 minute ago, David H. Lipman said:

Yahoo! just admitted they were compromised in 2014 where 500 Million accounts were affected.  Surprisingly, they are JUST admitting to it now.  The site referenced has no information on that Yahoo! breach.

I knew there was a breach based associated events which lead me to believe that there was indeed a breach.

 

Yahoo claims to have discovered the breach two months ago. Yeah-it's astounding they just learned of it and they are being raked for delaying reporting it two months after the fact. They did not even disclose it to their Acquirer Verizon, who is/was paying millions for Yahoo's major asset, it's customer database that was available for $1,800 on the dark net (that dark net site stopped being accessible due to a DDos attack sometime after the breach was discovered.)

[hawki321]

9 minutes ago, David H. Lipman said:

Yahoo! just admitted they were compromised in 2014 where 500 Million accounts were affected.  Surprisingly, they are JUST admitting to it now.  The site referenced has no information on that Yahoo! breach.

I knew there was a breach based associated events which lead me to believe that there was indeed a breach.

 

It is too soon to reasonably expect that the huge Yahoo database would have been become part of Pwned''s database.

[hawki321]

31 minutes ago, David H. Lipman said:

I will confirm that not only were me notified, Malwarebytes reset our accounts.

I remember the event very well as I was one of those who reported the possibility of the breach to the Forum Administrator.

You are jumping to a faux conclusion.

EDIT:

Reference:  Pwned?

 

I'll be damned. I found the Email From Malwarebytes for the Password Reset dated Nov. 21, 2014. I had overlooked it and never reset my PW. Doh.

 

My sincerest of apologies are offerred to Malwarebytes.

 

MODS PLEASE DFELETE THIS THREAD AT YOUR PLEASURE.

[msherwood]

21 minutes ago, hawki321 said:

 

I'll be damned. I found the Email From Malwarebytes for the Password Reset dated Nov. 21, 2014. I had overlooked it and never reset my PW. Doh.

 

My sincerest of apologies are offerred to Malwarebytes.

 

MODS PLEASE DFELETE THIS THREAD AT YOUR PLEASURE.

No worries! We always welcome the dialogue. Mind if I lock this now since it's resolved?