Emailed them

yay im not in there

oh shit lmao looks like my uni got pwned

Your uni uses goybest?

its unrelated

came up when i was searching for my email on epin haxor . net

people really need to step up their password game

i wonder how many of those are their email acc pw at the same time

my email acc has double auth and a completely random pw

last line of defence against russian/chink haxorz

i remember someone in this discord talking about how discord was unsecure af like 5 months ago

in what way?

was it only for goibest app?

there is a guy with Points: 677

dam

apparently that's how people got pwned, problem with the app since May

@Lefteris specifically, the API the app uses, not the app itself (though i think the details of the insecurities in the API where obtained mainly from decompiling the app?)

so this is ongoing or what

im not sure whether to go into panic mode

yeah they haven't fixed it

nuke china already

if you use the password you used on gearbest for any other purposes then your accounts were already at risk and you only have yourselves to blame tbh lads

s-stop

also what about your adress and full name

or do you fake that too

true

the bottom line is

nuke china

true

@Lefteris you can get that amount pretty easily if you get into the shill program

which is easy to do

https://haveibeenpwned.com/

yeah that was the first place i checked

one of my emails was compromised from services i used 12 (!) years ago.

it sounds like this full pastebin is floating around on private hacker discords

I think haveibeenpwned would need that list to update their site

so I would take it with a grain of salt and still change password/2-auth everything

yeah probably

im fairly safe anyways

all my shit is 2authed already

now if someone was to steal my phone