Woke up at 3am to a login alert from a city I have never visited
I was half asleep in bed in Boise when my phone buzzed with a notification that someone in Kyiv tried to log into my bank account. I sat up, opened the app, and saw three failed attempts on my savings login. Turns out I had used the same password on a fitness forum that got hacked back in 2019, and that combo was sitting in some leaked list online. I spent the next hour changing every password I could think of and turning on two factor for my bank and email. Took me way too long to do this. What app do you all use to check if your info is already floating around out there?
Man, that 3am buzz is the worst way to wake up and I feel for you. Same thing happened to my wife last year, someone in another country tried her email and she was up the rest of the night changing stuff. The scary part is what you said about the fitness forum from 2019, because that old junk never really goes away, it just sits there waiting. You did the right things though with the two factor and fresh passwords, that is the stuff that actually keeps them out. For checking leaks I use haveibeenpwned, you just type your email and it tells you which breaches you showed up in. Do that for every email you own, because you will probably find a few you forgot about.