Questions tagged [data-breaches]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Were Heroku's standard git repositories accessible by April 2022 attacker?

In their communication about the april 2022 breach (summary here), Heroku mentioned that organizations with the Heroku Github integration got their source code potentially accessed by the attacker. ...
user avatar
0 votes
0 answers
77 views

Why are environment variables safe after 2022 Heroku breach?

In their communication about the april 2022 breach (summary here), Heroku states that environment variables (other than Review apps and CI variables) were safe because they are encrypted at rest. We ...
user avatar
0 votes
0 answers
89 views

My email listed in a breach on sites I do not recognize ever sign into. What happen?

I use Firefox Monitor to keep me updated if my email ever turn up on breaches or data dumps. It curates breaches data from many sources and cross reference our email to check if our email turn up on ...
user avatar
  • 101
1 vote
2 answers
236 views

Effective ways to hash phone numbers?

Suppose a company wants to implement 2FA for it's users using phone number OTP system, but does not really want to store their phone numbers as it could get breached and phone numbers are considered ...
user avatar
2 votes
1 answer
122 views

What should I do if my sensitive information is potentially leaked?

I sold an laptop recently, but didn’t care to do a secure erase to make sure there wasn’t any data left. After a long time, I suddenly realized that I shouldn’t have be so careless and began to worry ...
user avatar
  • 23
1 vote
1 answer
133 views

Can Identity Theft Protection Services Get Hacked?

I recently was dumbfounded by a question whether identity theft protection services can get hacked. Me and my family we're T-Mobile customers in the US and after the recent T-Mobile hack we got free ...
user avatar
  • 153
0 votes
0 answers
36 views

How bad is it if HaveIBeenPwned reports pwned accounts that aren't mine? [duplicate]

Just for kicks, I recently entered my email in HaveIBeenPwned, figuring that there have been enough data breaches in enough places over the years that it would probably turn up something just by the ...
user avatar