My PW manager told me that my info was leaked in the recent eye4fraud.com breach. How can I know what site shared my data with them? (lemmy.world)

submitted 1 year ago by BackOnMyBS@lemmy.world to c/privacy@lemmy.ml

24 comments fedilink hide all child comments

My password manager told me that my info was leaked, including IP address, address, email, personal information, and phone number, in a data breach of eye4fraud.com. However, I don't use eye4fraud, so it must have been a site that uses their services. I would like to change my login credentials on the site that shared my data with them (and stop using their service since they're sharing my info with a security company that was breached), but I don't know which site that was. I found this list of sites that use eye4fraud, but that list has over 1,600 entries. Other than reviewing every single sight on the list, is there a way of finding out which site that I use leaked my info?

you are viewing a single comment's thread
view the rest of the comments

[-] RQG@lemmy.world 4 points 1 year ago

Does something similar exist aside from Gmail? Cus you know. Gmail.

[-] Triton@lemm.ee 9 points 1 year ago

I think it's a fairly standard feature. At least Protonmail also supports this kind of "alias".

[-] DudeDudenson 2 points 1 year ago* (last edited 1 year ago)

If I'm not mistaken it's part of the original spec, Dylan beattle had a bit in a talk about email at some point

Edit: I was in fact mistaken it's a Google only thing and not part of the spec

[-] ebits21@lemmy.ca 8 points 1 year ago* (last edited 1 year ago)

You could use something like simplelogin.io to create aliases.

Integrates with password managers like Bitwarden nicely to generate aliases.

I think many other services support the + trick though too. The downside is that spammers know the + trick and can find out your base email easily; they can’t if you use an alias.

[-] elltee@lemmy.one 5 points 1 year ago

Protonmail supports + addresses as well. Not sure about others.

[-] thesmokingman@programming.dev 4 points 1 year ago

Apple: https://support.apple.com/en-us/HT210425
https://simplelogin.io/
DuckDuckGo: https://spreadprivacy.com/protect-your-inbox-with-duckduckgo-email-protection/
https://addy.io/
Proton’s plus address support: https://proton.me/support/addresses-and-aliases
Catch-all emails for a domain you own (search how to set up with your hosting provider)
Firefox: https://relay.firefox.com/

YMMV on all of these. These are things I use or have considered.

[-] appel@whiskers.bim.boats 2 points 1 year ago

Afaik this is not a feature unique to Gmail, it's a feature of the email system as a whole. Same with a dot. Any characters after a plus or dot in the first part of the email are ignored.

[-] Nurse_Robot@lemmy.world 3 points 1 year ago

I'm fairly certain you're wrong about the "." in an email address

this post was submitted on 28 Sep 2023

55 points (100.0% liked)

Privacy

32169 readers

438 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS