Of course it is if you use the same password on other services, but what about if you don’t ? What can hackers do with just your email address, username, first and last name other than sending you phishing emails? It doesn’t seem such a big deal to me.
In: 1
I start spraying that information out using automated tools and then start refining lists based on low hanging fruit. Maybe you’re one of them. I’ll keep a database interesting targets, and check to see if your hashed password matches something easy in a rainbow table making me think you use weak security elsewhere.
Maybe I’ve already targeted you in some way and will use the breach to gather more information about you. Or maybe you’ll get rich in 5 years, not increase your security, and I’ll check for old data reaches to begin social engineering my attack.
Skilled criminals have a lot to gain from folks thinking data breaches aren’t a big deal. I understand no one taught you the real dangers of having an online presence and the security risks that come with it. Just know that the easier target you are, the dumber the criminal can be to fuck your world up.
Latest Answers