Digital Personal Security

[Jobbo]

If you’re in the Apple world, just open the passwords app, which uses FaceID, and look at the security tab for passwords that are duplicated or been accessed ina data breach somewhere. It gives you a change password which opens up the site in question and then you can change to a random one and/or passkey

I keep getting reminders to do this - I've done it, the sites themselves are now defunct and I can't change my password or even access the site so it's not an issue. Other than the reminders continuing to pop up.

If it’s for particular sites, just swipe left and delete the stored info? Or am I misunderstanding your post?

I can delete the stored info in my phone but that hardly resolves the problem if the website starts up again

[DeskJockey]

In addition to the good advice already posted it is worth signing up with haveibeenpwned[.]com (free). It'll give you an idea of which data breaches You've been caught up in.

[KiwiDave]

I think it was the cloning of the phone and getting into banking apps that alarmed me the most...

I'm not sure I follow that one, in order to clone the phone and get access to apps, you'd need to essentially be doing a full restore of it from a backup? Why the hell would the phone company have that?

I keep getting reminders to do this - I've done it, the sites themselves are now defunct and I can't change my password or even access the site so it's not an issue.

In these cases, I'd at the very least assume those passwords and anything close to them are forever compromised and make sure all of your other passwords bear no resemblance.

One of my most livid experiences with this was Disney+ where the Mrs compromised the password by using it in another system that was hacked. You couldn't get into Disney+ to update the password without resubscribing which made my blood boil. Never subscribing to them ever again.

In addition to the good advice already posted it is worth signing up with haveibeenpwned[.]com (free). It'll give you an idea of which data breaches You've been caught up in.

This.

The tip to try and avoid using MFA that is delivered via text is also a good one.

And finally, keep all of your software up to date, wherever it is. Modem, website, phone apps, all of them.

[duncs500]

I think it was the cloning of the phone and getting into banking apps that alarmed me the most...

I'm not sure I follow that one, in order to clone the phone and get access to apps, you'd need to essentially be doing a full restore of it from a backup? Why the hell would the phone company have that?

Perhaps it was just via the banking website then. I think they cloned his SIM through his email and then once they had those it unlocked loads of stuff.

[Matty]

Suspect that was SIM Swapping, which used to be fairly easy to do by social engineering you and/or your carrier...it's one of the reasons MFA via text is being turned off and discouraged.

Like all cyber stuff, if someone wants to get in, they'll get in, you just need to protect yourself against the broader attacks.

Safest place to store your information now is probably on a notebook in your house

[Mito Man]

I was going to say that my password manager is my notebook and good luck to any hackers trying to get access to that