Password compromise notice?

[RamInfo]

this morning I received a security notice from my iPad that my password/username for this site had appeared in a listing on the dark web, and recommended an immediate pw change. I did so, switching from a really weak pw to a much stronger one. Anyone else get such a notice?

Best,
RI

 

[Curmudgeon]

Well, I don't have an iPad or any IOS devices. Also, I don't access this site from any mobile devices, phone, tablet, etc., just my home laptop, which is moderately protected.
No such warning here.

 

[RamDiver]

this morning I received a security notice from my iPad that my password/username for this site had appeared in a listing on the dark web, and recommended an immediate pw change. I did so, switching from a really weak pw to a much stronger one. Anyone else get such a notice?

Best,
RI

Was it an OS-generated notification or an email with a link to update your PW?

It does sound suspiciously like a phishing scam.

.

 

[rule18]

Gotta be phishing, to our knowledge nobody else has reported this type of message.

 

[crackerjack1957]

Hope you didn't click on the phishing link to change or they caught their phish

 

[mikeru]

I got the same notice but not for ramforum.com. I was logging onto my Pizza Hut account from my phone (iphone 15) to order lunch when I got the notice. I ignored it, logged into my account, then changed the password from the Pizza Hut website. I never use links provided in a popup, email, or text message. Not saying it was nefarious. Just saying I don't take chances on that stuff.

 

[RamInfo]

Gotta be phishing, to our knowledge nobody else has reported this type of message.

No, it was not via email or txt message like a typical phishing attempt. It was a notice from a third-party monitoring service I use and simply reported that my username and pw for this site were contained in a list of compromised authentication info posted on the dark web. Noncluded links or anything like that.

I’ve changed my pw here…

Best,
RI

 

[Jeepwalker]

Can't be too cautious.
Thanks

 

[04fxdwgi]

No, it was not via email or txt message like a typical phishing attempt. It was a notice from a third-party monitoring service I use and simply reported that my username and pw for this site were contained in a list of compromised authentication info posted on the dark web. Noncluded links or anything like that.

I’ve changed my pw here…

Best,
RI

Got that one too, but not for this site. Was an OLD site I haven't used in 20 years.

 

[nlambert182]

I got one from my iPhones PW manager for about 20 different sites. I don't think it was a phishing scam.

 

[Gregket1]

there is a big apple-phone phishing scam going around right now. Don’t click any links given to you by email, text, or popups. Go directly to “the effected site” via their app/web site and change passwords there.

At&t was also recently hacked so if you have shared passwords between at&t and anybody else you need to change them all. See above about safe way to do that.

Greg
VP bank security, retired.