Password Re-user? Get Ready to Get Busy
Summary: Netflix sent password reset notices to customers who had reused their Netflix credentials at LinkedIn, Tumblr or MySpace, breaches that together exposed more than a half billion usernames and passwords. Facebook has done the same, mining leaked Adobe credentials after that 2013 breach and hashing leaked passwords with its own one-way mechanism to find overlapping email addresses.
Bottom line: More than a half billion credentials from years-old breaches are now circulating, and criminals test them against third-party sites before the victims ever hear about it - so a password reused once can hand over an account years later.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026