Recently, I was reading an article about internet security and discovered a website for checking to see if your account has been part of a website security breach. Unfortunately, I discovered that I had been 'pwned'.
Derived from a misspelled comment in an online game, "pwned" (pronounced 'poned') is a derivation of the phrase "you have been owned". It means to be dominated against your will. Acts of being pwned may be referred to as 'pwnage' (pronounced 'ponage').
I was reading this article about Internet security and came across a web site programmed to test your account against known breaches. This tool can be found at www.HaveIBeenPwned.com. I checked my personal account and my work account, it reported "No pwnage found." I checked a couple of other accounts I have used. One of my older accounts did show up, it reported the following breach:
Adobe: The big one. In October 2013, 153 million Adobe accounts were breached with each containing an internal ID, username, email, encrypted password and a password hint in plain text. The password cryptography was poorly done and many were quickly resolved back to plain text. The unencrypted hints also disclosed much about the passwords adding further to the risk that hundreds of millions of Adobe customers already faced.
Compromised data: Email addresses, Password hints, Passwords, Usernames
H-m-m-m, I don't remember ever being notified by Adobe that my account information was compromised. Fortunately, I never use the same passwords on outside accounts that I would use on company or important personal accounts. Yes, I changed my passwords.
This website contains a database of 37 major web site hacks with over 175 million accounts including Gmail, Snapchat, Domino's Pizza, Yahoo! and others. It also checks against a database of 'pastes' that are used by hackers. The web site owner has stated he will add new data as it becomes available.
The web site also has a signup feature that will notify you when an account has been compromised. I signed up for that feature. There is no cost and you are not required to enter any login information. It does send an email to you to verify that you want the service.