• boatswain@infosec.pub
    link
    fedilink
    English
    arrow-up
    1
    ·
    23 hours ago

    As another poster detailed, this is not a company that exposed your info: these credentials are all from stealer logs, which are logs of credentials stolen by keyloggers installed on machines. If your credentials were in this report, it means that you’ve entered that username and password on a machine with malware on it. Could be your personal machine, or it could be some other computer you’ve used.

    • Jax@l.hostux.net
      link
      fedilink
      English
      arrow-up
      2
      ·
      21 hours ago

      That’s true. My point was just that the important thing here is knowing personally which domains were affected so one can personally change those sets of credentials. If I don’t know which of my credentials leaked then there’s no value to me.

      I was able to finally get access and did change the specific credential that had leaked (again, not assigning blame to any specific site here).