Alert: Black Market Website Surveillance

Anonymous · ‎10-07-2016

Hi, I just signed up for the myFICO Ultimate 3B yesterday. This morning I received two alerts that my information was located on black market websites. The details shown are very limited though. Each of the two alerts shows only the Record Creation Date, Email Address, User Password. The email address is my regular email address, but the password is a jumble of letters and numbers that I have never used as my password for anything. It also does not state which site this email address and password belong to. Any ideas?

Anonymous · ‎10-19-2016

This happened to me as well. I'd love to hear the experiences of others too.

909 · ‎10-19-2016

This happened to me as well. Here's the advice from miFico, although I'm not clear if I should change all passwords.

###

Exposed information: User IDs, Password, Email, Credit Card PINS

Your action: Change passwords or pins - Review the alert details for information that you can quickly change - items like passwords, usernames and credit card PINs. Update these items immediately. For the next several months, closely monitor any associated accounts.

###

Fico 8 Scores
7/2020: EQ - 842; TU - 832; EX - 848
10/2017: EQ - 823; TU - 835; EX - 824
05/2016: EQ - 712; TU - 706; EX - 710
11/2015: EQ - 694; TU - 651; EX - 653
5/2015: EQ - 670
5/2014: EQ - 653
11/2013: EQ - 645
05/2013: EQ - 656
11/2012: EQ - 646

Eight CCs ($179,500 CL, 0%-1% UTIL)
AoOA = 18.6 years, AAoA = 60 mos., AoYA = 18 mos.
One mortgage, one HELOC, no car loans.
Derogs from 2009 and 2010 now gone after 7 years. I started paying attention to credit scores in about 2014. It's taken a few years but credit scores are now good after starting in the high 500s back in 2011

Anonymous · ‎10-19-2016

Not from myfico but i recently got pwned and notified by "you've been pwned":

In October 2016, a large Mongo DB file containing tens of millions of accounts was shared publicly on Twitter (the file has since been removed). The database contained over 58M unique email addresses along with IP addresses, names, home addresses, genders, job titles, dates of birth and phone numbers. The data was subsequently attributed to "Modern Business Solutions", a company that provides data storage and database hosting solutions. They've yet to acknowledge the incident or explain how they came to be in possession of the data.

--

So yea change passwords early and often

Anonymous · ‎10-20-2016

In another post members who were getting this alert were also getting hits on https://haveibeenpwned.com which gives a bit more detail. Keep in mind while some data might overlap it might not be comprehensive.

Anonymous · ‎10-21-2016

It's weird that the password shown is no password I've ever used. Just to be safe, I went to all my important accounts and gererated new, random passwords for each one, including my email.

Anonymous · ‎10-21-2016

@Anonymous wrote:
In another post members who were getting this alert were also getting hits on https://haveibeenpwned.com which gives a bit more detail. Keep in mind while some data might overlap it might not be comprehensive.

I also just checked the website you referenced, and found that I'd been "pwned" three times. All three are for old web accounts I haven't used in years.

Anonymous · ‎10-23-2016

@Anonymous wrote:
@Anonymous wrote:
In another post members who were getting this alert were also getting hits on https://haveibeenpwned.com which gives a bit more detail. Keep in mind while some data might overlap it might not be comprehensive.
I also just checked the website you referenced, and found that I'd been "pwned" three times. All three are for old web accounts I haven't used in years.

Same here I got a Black Market warning on an old user name I used years ago.

Anonymous · ‎12-01-2016

My favorite email that I used everyday has been pwned three times. All on social media accounts i havent used in years... way before i had a cc haha