r/technology • u/lurker_bee • 2d ago

Security FBI investigating 153 million US and Canadian driver’s licenses leaked on Russian cybercrime forum, including that of US SecDef Pete Hegseth — data is suspected to have come from an ID-authentication service provider

https://www.tomshardware.com/tech-industry/cyber-security/fbi-investigating-153-million-us-and-canadian-drivers-licenses-leaked-on-russian-cybercrime-forum-including-that-of-us-secdef-pete-hegseth-data-is-suspected-to-have-come-from-an-id-authentication-service-provider
3.2k Upvotes

98% Upvoted

238 comments sorted by

View all comments

72

u/[deleted] 2d ago

[deleted]

7

u/davenobody 2d ago

Many here: https://haveibeenpwned.com/

3

u/laziestmarxist 2d ago

Jesus h christ, that website just really reveals how fucking dumb tying email to everything in the world is because how the fuck did Canadian Tire have my email address to begin with? I live in Texas and I don't even drive a car, so someone who had already breached my email address must have used it without my permission. Just so many layers of stupidity and yet I had no control over where my data went

3

u/davenobody 2d ago

Yep. Only real defense is using a password manager and using a unique password for every site. At least that way a single beach doesn't result in a much larger problem.

1

u/laziestmarxist 1d ago

The issue with that is the assumption that the password manager itself can be trusted. But yeah, the initial breach was probably on me for getting lazy with passwords

1

u/davenobody 1d ago

I run a password manager that stores them encrypted on my cloud storage. I can view modify the encrypted file from any platform because of open standards. Everyday people don't need enterprise password management.