By Hackermane — Guest Contributor, Tech Scene Media
So, you checked HaveIBeenPwned.com and there it is: your email is on the list. In the great words of Douglas Adams: Don’t panic! But don’t ignore it either.
When these records are leaked, they often include usernames, email addresses, and phone numbers. In larger-scale breaches, the stakes get much higher, involving sensitive data like SSNs and credit card information. While we aren't covering the complexities of credit monitoring here, we are focusing on the immediate task: locking your digital doors and kicking any intruders out of your accounts.
First & foremost, let's reset your password, using a password manager to generate a new, unique string. Crucially, DO NOT click the "Reset Password" link in an email or text notification. If you are already dealing with a leak, you are at high risk for phishing. Instead, manually type the website’s URL into your browser and initiate the reset through their official login page.
Next, audit your recovery methods, checking your secondary email addresses and security questions. Note that you can treat security questions like a secondary password; by "lying" or using something nonsensical, you are protected from someone looking you up on social media and guessing their way in.
Finally, check if Multi-Factor Authentication (MFA) is enabled. If it isn't, turn it on immediately, as even the weakest forms of MFA increase your security exponentially. If a service doesn't offer MFA, that’s a massive red flag; if they won't provide the basic tools to protect you, they aren't a partner worthy of trusting with your data.
If you missed our previous articles, be sure to go back and read up on Password Managers and MFA—they are essential pieces of the toolkit. Stay tuned as we dive deeper into the tools and tactics needed to stay safe in today's digital world. If you have infosec questions, or want to know my take on any particular topic, don't hesitate to reach out to Hackermane!
Catch up on the series:
Guest Writer: Hackermane is a Memphis-based security expert and organizer of Midsouth Makers and Memphis Info Security, two meetups built on the same premise as this article: the threats are bigger than any one person, but the people in the room are how the city gets ahead of them anyway. Learn more or hang out: https://hackermane.com/