Data leak of DCUM passwords

[Anonymous]

Hey Jeff

I've just changed my password (for when I use a log-in ID here) as I've had notification that there's been a DCUM data leak of them (passwords)

Thought you might want to know.

[jsteele]

Can you tell me more about the leak? Or the exact wording of the message you received?

[Anonymous]

jsteele wrote:Can you tell me more about the leak? Or the exact wording of the message you received?

It was a pop up on my Mac. I get it almost every day but normally they tell me there's been a data leak of passwords from things I no longer use, like Instacart. So the wording is usually like

You should know there's been a data leak of passwords on the following websites; DCurbanmom.com, instacart, fandango

etc

[jsteele]

Anonymous wrote:

jsteele wrote:Can you tell me more about the leak? Or the exact wording of the message you received?

It was a pop up on my Mac. I get it almost every day but normally they tell me there's been a data leak of passwords from things I no longer use, like Instacart. So the wording is usually like

You should know there's been a data leak of passwords on the following websites; DCurbanmom.com, instacart, fandango

etc

What provides the pop-up?

Just FYI, passwords are stored in encrypted format and salted. So it would be somewhat hard to decrypt them. I also have two monitoring services to alert me to compromised passwords and neither has alerted about DCUM.

[Anonymous]

I just opened Safari and got a new one.
I can't copy / paste but this is what it says

COMPROMISED PASSWORD
The passwords for "scouting.org", "google.com" and "wayfair.com" accounts have appeared in a data leak, putting your accounts at high-risk of compromise. Safari can help you re-secure your accounts.

And that last bit "re-secure your accounts" is a link of some kind.

[jsteele]

Anonymous wrote:I just opened Safari and got a new one.
I can't copy / paste but this is what it says

COMPROMISED PASSWORD
The passwords for "scouting.org", "google.com" and "wayfair.com" accounts have appeared in a data leak, putting your accounts at high-risk of compromise. Safari can help you re-secure your accounts.

And that last bit "re-secure your accounts" is a link of some kind.

Okay, that makes a lot more sense. You probably used the same password on multiple sites (not necessarily those that were listed). That password has appeared in a leak, but it was not necessarily obtained from DCUM.

In other words, say that you used the password "pw123" on DCUM and then also used "pw123" on. let's say, att.com (which was the subject of a web-publizied hack). Then Safari knows that your password was leaked from att.com and is also used on DCUM. So, it suggests that you change it on DCUM.

[Anonymous]

OP is getting scammed

[jsteele]

Anonymous wrote:OP is getting scammed

No, he just misunderstood Safari's warning which is a bit misleading.

[Anonymous]

jsteele wrote:

Anonymous wrote:OP is getting scammed

No, he just misunderstood Safari's warning which is a bit misleading.

I'm a she, but also a technical dunce, so thanks for the above explanation about the multiple use of the same password. Have changed them where it counts.