Right now, anyone can go on the dark web and purchase the account data of 617 million people across 16 different websites for less than $20,000. This account data includes birthdays, email addresses, full names, and hashed passwords.
Data breaches seem to happen all the time, and we’ve kind of gotten used to it. If you’ve never been affected by a breach, then they can be easy to ignore. But 16 websites have been compromised at once. This would be a good time to pay attention to a data breach.
As reported by The Register, here are the 16 sites that have been affected:
Dubsmash (162 million), MyFitnessPal (151 million), MyHeritage (92 million), ShareThis (41 million), HauteLook (28 million), Animoto (25 million), EyeEm (22 million), 8fit (20 million), Whitepages (18 million), Fotolog (16 million), 500px (15 million), Armor Games (11 million), BookMate (8 million), CoffeeMeetsBagel (6 million), Artsy (1 million), and DataCamp (700,000).
Some of these websites, including EyeEm, MyHeritage, and 8fit, have confirmed that they were hacked. But not all of these hacks are recent, some of them were done a year or two ago.
You may be thinking “I haven’t logged into Armor Games in years,” but just take a minute to think about how long you’ve been using the same email address or the same password. That 5-year-old login information could be used to access your Facebook, your email address, or your bank account.
That’s why you should change your passwords to something new and secure every time a big data breach happens. Make sure to enable two-factor authentication, and use different passwords for each website that you use. And while there isn’t any evidence that credit card or banking information has been compromised, it couldn’t hurt to freeze your credit if you’ve ever paid for content on any of these 16 websites.
Worried that your information has been compromised in a data breach? You can use Have I Been Pwned to check to see if your email address or passwords have shown up anywhere on the dark web. Just keep in mind that Have I Been Pwned isn’t perfect, and it may not have information from today’s data breach.