New breach: Artists&Clients was breached in August and ransomed for US$50k. The data was then dumped last month and included 95k email addresses, usernames, IP addresses and bcrypt password hashes. 70% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/Artis...

This is big - data breach at Discord (or at least at an unnamed third-party): discord.com/press-releas...

Going live with my weekly vid in 15 mins! Breaches of the Week; Welcoming CERN to HIBP; Latest Pilot Jobs and HomeRefill Data Breaches; Brainstorming the Breach Pipeline youtube.com/live/MsLSF_e...

New breach: Now defunct Brazilian e-commerce platform HomeRefill was breached in 2020. Data included 187k unique email address, name, phone number, DoB and salted password hashes. 87% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/HomeR...

New breach: Latest Pilot Jobs had 119k records breached in 2022. Data included email address, username, name and unsalted MD5 password hashes. 81% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/breach/Lates...

Well this just made life a lot easier - ChatGPT hash cracking!

Social media engagement on the big platforms has really changed the last few years. A lot of people I connected with on X left, Mastodon never really seems to have hit its stride, LinkedIn has a lot more professional engagement and FB a lot more casual stuff. How are you all finding Bsky?

How do you know if one of your accounts has been part of a security breach? @TroyHunt.com talks on RunAs Radio at runasradio.com/Shows/Show/1... about HaveIBeenPwned, the free service that lets you know when your account shows up in a breach!

Leave it to @troyhunt.com to do good after bad things have happened. It's nice to read good and uplifting news.

We're very happy to help the amazing people at @cern.bsky.social gain greater insights into the impact of data breaches on the work they do. CERN is the first intergovernmental organisation we've onboarded to @haveibeenpwned.com, here's the background: www.troyhunt.com/welcoming-ce...

Weekly update is up! Have I Been Pwned Demos: Domain Searches and the Breached Account API; French Data Breaches: Bouygues Telecom and Cultura www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 15 mins! Have I Been Pwned Demos: Domain Searches and the Breached Account API; French Data Breaches: Bouygues Telecom and Cultura youtube.com/live/wFeetGy...

New breach: Cultura had 1.5M unique email addresses breached in September last year. Data also included name, phone number, physical address and orders. 78% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/Cultura

Big thanks to an all-new blog sponsor this week, Oh Dear! All-in-one website monitoring with security alerts for DNS & certificate changes. 10-day free trial. Keep your sites secure! ohdear.app?via=troyhunt

New breach: French telco Bouygues Telecom had 5.7M unique email addresses breached last month. Data also included name, physical address, phone number and IBAN. 57% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Bouyg...

The latest @haveibeenpwned.com demo video is now up! This time, it covers the breached account API, a service on which we currently support hundreds of millions of monthly requests. It also introduces the all-new *totally free* test API key: www.troyhunt.com/hibp-demo-qu...

Weekly update is up! ParkMobile’s MASSIVE $1 Class Action Payout; Miljödata Data Breach; FreeOnes Data Breach; My House Talks Like Me www.troyhunt.com/weekly-updat...

In October 2021, now defunct Arabic language Anime website Animeify suffered a data breach that exposed 808k email addresses. Data also included name, username, gender and plain text password. 37% were already in @haveibeenpwned. Read more: haveibeenpwned.com/breach/Anime...

The @haveibeenpwned.com demos YouTube channel is now live! We've started creating short videos to walk through features and make them easier to understand. The first one has just gone live, here's the launch blog post: www.troyhunt.com/have-i-been-...

Big thanks to @1password.bsky.social for sponsoring my blog this week! 1Password Extended Access Management: Secure every sign-in for every app on every device. 1password.com/troyhunt

Going live with my weekly vid in 15 mins! ParkMobile’s MASSIVE $1 Class Action Payout; Miljödata Data Breach; FreeOnes Data Breach; My House Talks Like Me youtube.com/live/WWkb4pc...

👋 Bluesky Community! I didn't know @troyhunt.com's HIBP was here. Great resource to maintain awareness of potential compromises to your email address(es) and to stay aware of new breaches. Check it out, enter your email, and stay a little more secure. @gate15.bsky.social

New sensitive breach: Adult website FreeOnes had 960k email addresses breached from their forum in 2017. Data also included username, IP addresses and salted MD5 password hash. 83% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/FreeO...

Brace yourself, w̶i̶n̶t̶e̶r̶ #dotnet 10 is coming! ⛄️ Let's look at the new capabilities and features we are excited about for the upcoming .NET release in November. Expect passkeys, #opentelemetry additions,TLS for *.localhost, and more. 👀 duende.link/qet4wp9 #aspnetcore

New breach: Swedish system supplier Miljödata was the victim of a ransomware attack last month. Impacted data included 870k email addresses along with names, physical addresses, DoBs and gov IDs. 11% were already in @haveibeenpwned. Read more: haveibeenpwned.com/breach/Miljo...

Weekly update is up! Building the Prusa Core One; Pwned Passwords Passes 16B Monthly Requests; Going Deeper Down the IoT Rabbit Hole www.troyhunt.com/weekly-updat...

Big thanks to Malwarebytes for sponsoring my blog this week! Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing www.malwarebytes.com/browserguard...

Oh yeah! Now *this* is cool! Or freaky 🤔 Doorbell by @mUbiquiti, voice by ElevenLabs and orchestration by Home Assistant. It’s an evolution of this post: www.troyhunt.com/home-assista...

Going live with my weekly vid in 20 mins! Building the Prusa Core One; Pwned Passwords Passes 16B Monthly Requests; Going Deeper Down the IoT Rabbit Hole youtube.com/live/Khlyor3...

Weekly update is up! A Week of School, Cyber and Food in Singapore www.troyhunt.com/weekly-updat...

Has this sort of behaviour *ever*!worked out well for the organisation involved? 🤔

Going live with my weekly vid in 15 mins! A Week of School, Cyber and Food in Singapore youtube.com/live/HvgoBdh...

New breach: 1M records were allegedly obtained from Italian fashion designer Giglio. Data included email & physical address, name & phone number. Giglio did not respond to repeated attempts to report the breach. 60% were already in @haveibeenpwned. More: haveibeenpwned.com/breach/Giglio

Weekly update is up! Upcoming Events in Singapore; TheSqua[.]re Breach; Home Assistant, Ubiquiti and AI: www.troyhunt.com/weekly-updat...

It looks like the petfood brand Blink! was breached. @troyhunt.com @haveibeenpwned.com

NEW: Credit reporting giant TransUnion has confirmed a data breach involving more than 4.4 million customers' personal information. TransUnion claims "no credit information was accessed" in the late-July breach, which it said involves its U.S. consumer support operations.

There are a lot of rubbish IoT apps, and there's a lot of junk AI out there. But... I reckon there's a sweet spot that's beginning to tie AI into genuinely useful IoT implementations. Here's what I've been playing with: www.troyhunt.com/home-assista...

Going live with my weekly vid in half an hour! Upcoming Events in Singapore; TheSqua[.]re Breach; Home Assistant, Ubiquiti and AI youtube.com/live/vDaMFUl...

New breach: 107k customer records were allegedly obtained from TheSqua[.]re in June. Data included email, city, name and phone number. TheSqua[.]re did not respond to repeated attempts to report the breach. 65% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/breach/TheSq...

After reading @troyhunt.com 's piece on getting local advice after a breach (www.troyhunt.com/get-pwned-ge...), I would like to nominate SafeOnWeb (safeonweb.be) as the Belgian source.

Very happy to be speaking at New Zealand Chamber of Commerce next week in Singapore, in conjunction with my old school, the Australian International School nzchambersg.glueup.com/event/firesi...

Weekly update is up! The Allianz Life Salesforce Breach; The 16m PayPal Breach That Isn’t; It’s Been a Quiet Week - AMA! www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 15 mins! The Allianz Life Salesforce Breach; The 16m PayPal Breach That Isn’t; It’s Been a Quiet Week - AMA! youtube.com/live/TNRlFEy...

Big thanks to @1password.bsky.social for sponsoring my blog this week! 1Password Extended Access Management: Secure every sign-in for every app on every device. 1password.com/troyhunt

New breach: Allianz Life had 1.1M unique email addresses breached last month via a social engineering attack. Data included name, phone number, physical address, DoB and gender. 72% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Allia...

Weekly update is up! Launched the Reseller Portal; Local HIBP Advice From Trusted Govs; 16B Passwords AKA Data Troll; Paired Those Shellys www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 30 mins! Launched the Reseller Portal; Local HIBP Advice From Trusted Govs; 16B Passwords AKA Data Troll; Paired Those Shellys youtube.com/live/cfOQfwr...

Big thanks to Malwarebytes for sponsoring my blog this week! Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing www.malwarebytes.com/browserguard...

All those "16 billion passwords" headlines in June sounded hyperbolic, didn't they? Yeah, turns out they were: www.troyhunt.com/that-16-bill...

New stealer logs: In June, news broke of a "16 billion password" breach, though the data turned out to be mostly previously seen stealer logs. 109M unique email addresses have been loaded as "Data Troll", with 96% already in @haveibeenpwned.com. More: haveibeenpwned.com/breach/DataT...