Stolen Passwords?

Apparently, a crime ring in Russia has stolen a whole lot of passwords LINK

quote:

---

A ring of Russian criminals has acquired 1.2 billion username and password combinations, as well as credentials for more than 500 million email addresses, amassing the largest known collection of stolen Internet credentials.

Cybersecurity firm Hold Security discovered that the group gathered confidential material from 420,000 websites, including household names and small Internet sites, the firm said in a blog post. The crime ring, based in a small city in south central Russia, hacked websites inside Russia as well as major Fortune 500 companies abroad, the New York Times reports.

---

However, Hold Security, the firm that is reporting this, very quickly offered a paid service to determine whether you've been affected. LINK

That's not to say they are definitely trying to scam people, but it does sound a little fishy.


Regardless, we should all take this opportunity to enable multi-factor authentication on every site that allows it. Especially the email account that surely most of us use to send ALL our other account password reset links to.