Like when I read 3 Billion National Public Data Records with SSNs, Addresses Dumped Online, am I supposed to access that data dump or something to see if I got pwned? Are there equivalents to haveibeenpwned.com for this type of stuff? Any guides on what to do when these happen? I feel like I’m doomscrolling or watching the news, and feeling depressed about the world as a result because I should be doing something but I can’t or it seems like I can’t.
Even though I know better than to put such personal info online, but that doesn’t eliminate the odds of them getting into breaches like these, and having started to be careful about digital privacy has opened my eyes to the sad state of privacy.
Get accounts on all three credit agencies and freeze your credit.
Use a password manager like 1Password so each site you use has a different password. Make sure you use MFA/2FA when you can and use your phone number as little as possible- it’s hilariously easier than you think to get your number transferred to a new phone.
You can use a service like https://www.optery.com/ which consumer reports just said is the best paid service next to doing it yourself for getting off lists.
am I supposed to access that data dump or something to see if I got pwned? Are there equivalents to haveibeenpwned.com for this type of stuff?
This is exactly why that website exists. They’ll collect all that data also and then when you type in your info it will tell you if it was leaked in this or any other data breach. If it is, then you need to go change it.
The way to avoid this being a problem is to use a proper password manager and email alias.
Lots and lots of people get their email and password leaked online, and this is the same credentials they use on every website. So what happens? Someone gets that info and starts plugging it into banking, CC, Apple, Google accounts, etc.
If you use a an alias and a random password, they can only get into that one site.
If the breached data contains your account passwords, cryptography keys, credit card info, etc you should update and invalidate that information. Once that data is out there, there isn’t really anything else you can do but make that data no longer useful.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacyguides@lemmy.one
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
We prefer posting about open-source software whenever possible.
No soliciting engagement: Don’t ask for upvotes, follows, etc.
Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
Be civil, no violence, hate speech. Assume people here are posting in good faith.
Don’t repost topics which have already been covered here.
News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
No misinformation: Extraordinary claims must be matched with evidence.
Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
You can check on https://npd.pentester.com/
Get accounts on all three credit agencies and freeze your credit.
Use a password manager like 1Password so each site you use has a different password. Make sure you use MFA/2FA when you can and use your phone number as little as possible- it’s hilariously easier than you think to get your number transferred to a new phone.
You can use a service like https://www.optery.com/ which consumer reports just said is the best paid service next to doing it yourself for getting off lists.
This is exactly why that website exists. They’ll collect all that data also and then when you type in your info it will tell you if it was leaked in this or any other data breach. If it is, then you need to go change it.
The way to avoid this being a problem is to use a proper password manager and email alias.
Lots and lots of people get their email and password leaked online, and this is the same credentials they use on every website. So what happens? Someone gets that info and starts plugging it into banking, CC, Apple, Google accounts, etc.
If you use a an alias and a random password, they can only get into that one site.
If the breached data contains your account passwords, cryptography keys, credit card info, etc you should update and invalidate that information. Once that data is out there, there isn’t really anything else you can do but make that data no longer useful.