General Question

MyNewtBoobs's avatar

How do I find out if my email and password have been leaked?

Asked by MyNewtBoobs (19059points) December 15th, 2010

So, I got this in my morning email:
At Amazon we take your security and privacy very seriously. As part of our routine monitoring, we discovered a list of email address and password sets posted online. While the list was not Amazon-related, we know that many customers reuse their passwords on several websites. We believe your email address and password set was on that list. So we have taken the precaution of resetting your Amazon.com password. We apologize for any inconvenience this has caused but felt that it was necessary to help protect you and your Amazon account.

So, aside from changing my Amazon password, how can I find out if I was on this list?

Observing members: 0 Composing members: 0

6 Answers

Tropical_Willie's avatar

@papayalily
SCAM PHISHING ?

Contact AMAZON read the following V V V V
Phishing or Spoofed E-mails (From AMAZON )

If you receive an unsolicited e-mail that appears to be from Amazon.com that requests personal information (such as your credit card, login, or password), or that asks you to verify or confirm your Amazon.com account information by clicking on a link, that e-mail was sent by a “phisher” or “spoofer.” Amazon.com will never ask for this type of information in an e-mail. Do not click on the link. Note that if you did not click on the link in the spoofed e-mail, your account at Amazon.com is fine. (Even if you did click on the link and go to the forged Web page, but didn’t enter anything, the phishers will not have your account information.) Read our page about how to identify spoofed e-mails.

MyNewtBoobs's avatar

@Tropical_Willie It didn’t contain a link – it told me to go to My Account, click on Forgot Password, and reset it that way.

Tropical_Willie's avatar

Contact them anyway, does not sound like Amazon ! !

FrogOnFire's avatar

Gawker Media (that huge blogging network) got hacked over the weekend and the hackers distributed the list of compromised users via BitTorrent. You probably had a Gawker account at some point (or maybe you still do). Many high-profile web sites, such as LinkedIn and Amazon, obtained the list and reset the passwords of their users on the list, simply because many people use the same passwords across many different sites.

Nothing serious to worry about…my LinkedIn password was reset. Just be sure the email is directing you to a legitimate web site.

HungryGuy's avatar

Yes, most such emails are scams that take you to a fake Amazon or PayPal site. You login with your password and viola! You’ve just given your password to a scammer.

Ignore such emails.

If you want to be extra paranoid, go to Amazon your normal way (not by clicking on any email link) and change your password.

Response moderated (Spam)

Answer this question

Login

or

Join

to answer.

This question is in the General Section. Responses must be helpful and on-topic.

Your answer will be saved while you login or join.

Have a question? Ask Fluther!

What do you know more about?
or
Knowledge Networking @ Fluther