I hope you are well.
NetGalley – 1,436,435 breached accounts
In December 2020, the book promotion site NetGalley suffered a data breach. The incident exposed 1.4 million unique email addresses alongside names, usernames, physical and IP addresses, phone numbers, dates of birth and passwords stored as salted SHA-1 hashes. The data was provided to us HIBP via a source who requested it be attributed to firstname.lastname@example.org.
If you have a NetGalley account please follow these steps:
- Change your password and make sure your new password is at least 10 characters long and contains an upper case, lower case, number and a symbol. You can even use a modified phrase or a line from a song if that helps you remember.
- Make sure you do not use the same password twice as this leaves you vulnerable to credential stuffing.
- Find a good password manager tool to help you remember all of your passwords. Some of our users say that 1Password is a good tool.
- Check out Incognito’s Email Hack Check tool. All you have to do is enter your email address and we will tell you instantly if it has been involved in one of the many data breaches that happen every day.
Let me know if you need any help here and please feel free to share this tip with family and friends.
All the best,
Incognito Privacy Care