Security breach / email threat PSA

[delphipsmith]

In case anyone reading this was not already aware, in March there was a security breach at DreamWidth and a number of user names and passwords were compromised (DW announcement here). Per their instructions, I immediately changed my DW password and also my LJ and AO3 passwords. Recently I got an email that correctly stated my (former) DW password, and then threatened various actions unless they got money (bitcoin) from me. Since that password is no longer valid, and I'm not concerned about the nonsense threats, I've deleted the email and don't intend to do anything.

BUT it's proof that the stolen data has been shared, and that my account was one of the ones compromised. So, if you have not yet changed your DW password, you should do so immediately, and if you use that same password on any other social media or other accounts, you should change those also, to something different.

Edit: FYI, what I got was one of these extortion emails. Annoying but basically toothless nonsense. If you get one too, don't sweat it :)

Comments

[corylea]

Thanks for the heads-up! I read about the breach but didn't take it seriously at the time. I've just changed my password.

You might want to forward the e-mail to the folks at Dreamwidth, just in case they can use it in any kind of case they might build against the thieves.

[delphipsmith]

Good idea - will do that. Thanks!

[magnetic_pole]

Thank you. :) M.

[anna_bird]

Oooh, good to know, thanks! My guy got one of those recently (I think they had one of his older gmail passwords?) and the email was glorious to read. My favorite line from it is still: [give me X amount of bitcoin or] "I will create for your life a nightmare." Noooooo!!! It sounds almost Shakespearean!

[delphipsmith]

I know, right? Hilarious, really. "You will never be able holding up your head publically". Oh noes!

(love the icon lol)