It’s exactly how it worked. A company called synthient made a master list with all the leaked emails + all leaked passwords. Then they were hacked and it leaked
Synthient wasn’t hacked, as a security company, they aggregated tons of stealer logs dumped to social media, Telegram, etc.
They found 8% of the data collected was not in the HIBP database, confirmed with some of the legitimate owners that the data was real.
They then took that research and shared it with HIBP which is the correct thing to do.
I was also thrown off by the title they gave it when I first saw it, a security company being hacked would be a terrible look. but they explain it in the article. Should probably have named it “list aggregation” or something.
Wispy2891@lemmy.world 4 days ago
It’s exactly how it worked. A company called synthient made a master list with all the leaked emails + all leaked passwords. Then they were hacked and it leaked
ChogChog@lemmy.world 3 days ago
Synthient wasn’t hacked, as a security company, they aggregated tons of stealer logs dumped to social media, Telegram, etc.
They found 8% of the data collected was not in the HIBP database, confirmed with some of the legitimate owners that the data was real.
They then took that research and shared it with HIBP which is the correct thing to do.
I was also thrown off by the title they gave it when I first saw it, a security company being hacked would be a terrible look. but they explain it in the article. Should probably have named it “list aggregation” or something.
Wispy2891@lemmy.world 3 days ago
so why hibp calls them data breach??? Ultra misleading, almost defamation, everyone including me only reads the headlines
ExLisper@lemmy.curiana.net 4 days ago
Someone should make a list of all the leaked credentials that got leaked.
felixwhynot@lemmy.world 3 days ago
I think that’s HIBP basically?
MrScottyTay@sh.itjust.works 3 days ago
But then nothing has changed if they were just collating what was already leaked.