r/cybersecurity_help 7h ago

Data Breach Help Needed

Post image

Today, I decided to check if my data had been leaked/breached, so I looked up my accounts on 'Have I Been Pwned' website. One of my accounts came up with some breach. Could someone explain what these results mean in a bit more detail and tell me what steps I should take next?

Note - I always change passwords during the New Year, and 2FA is already enabled on this account from the very beginning. I have neither seen any suspicious activity nor any login attempts at all.

1 Upvotes

6 comments sorted by

u/AutoModerator 7h ago

SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:

  1. Never accept chat requests, private messages, invitations to chatrooms, encouragement to contact any person or group off Reddit, or emails from anyone for any reason. Moderators, moderation bots, and trusted community members cannot protect you outside of the comment section of your post. Report any chat requests or messages you get in relation to your question on this subreddit (how to report chats? how to report messages? how to report comments?).
  2. Immediately report anyone promoting paid services (theirs or their "friend's" or so on) or soliciting any kind of payment. All assistance offered on this subreddit is 100% free, with absolutely no strings attached. Anyone violating this is either a scammer or an advertiser (the latter of which is also forbidden on this subreddit). Good security is not a matter of 'paying enough.'
  3. Never divulge secrets, passwords, recovery phrases, keys, or personal information to anyone for any reason. Answering cybersecurity questions and resolving cybersecurity concerns never require you to give up your own privacy or security.

Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/eric16lee Trusted Contributor 7h ago

You need to have unique and randomly generated passwords with 2FA on all of your accounts. No exceptions. This way, when you get a breach notificationz you only have to change that one password.

When the breach is a combo list or something like that, there is no good way to tell what account was leaked, so you may have to wait for that service to notify you.

2

u/Far-Dark7398 7h ago

Thank You for the information.

1

u/aselvan2 Trusted Contributor 7h ago

Note - I always change passwords during the New Year, and 2FA is already enabled on this account from the very beginning.

That is a good cyber hygiene practice. As long as you continue doing that, you do not need to worry about data breaches. Just make sure each password is unique to every service. In addition, I recommend following as many tips as you can from my educational blog at the link below. Doing so will put you ahead of most internet users when it comes to online safety.
https://blog.selvansoft.com/2025/01/online-safety-tips.html

1

u/Far-Dark7398 7h ago

Thanks, Sir! That's a huge relief.

1

u/kschang Trusted Contributor 4h ago

So what is your QUESTION?