? Security Alert! ?



There was a notice on the site earlier about a possible security breach on Subeta. Upon being alerted we moved into what we refer to as code red immediately, informing all of you to change your passwords.

Upon further inspection it appears that the hacking was incredibly isolated, and we believe from a non-Subeta attack that leaked emails and passwords from third party accounts.

As always we recommend changing your password frequently (one account hacked today hasn't been logged in to for five years, and their password was floating around!) and checking lists like Have I been PWNed to see if your personal information has been released in a hack.
May 15, 2017, 6:56 pm by Rocketlauncher
User Avatar

I think people often use someone else's email addresses, simply because the site needs one for whatever reason. For example: test(at)gmail.com Oh no — pwned! Pwned on 93 breached sites and found 269 pastes (subscribe to search sensitive breaches)

May 15, 2017, 6:51 pm by omg_carrie
User Avatar

thanks for the head's up!! That's an interesting site, didn't know about it before.

May 15, 2017, 6:50 pm by jensen
Avatar Border
User Avatar

i don't think tumblr itself has the join date anywhere -- i think the closest you can get is either your oldest post or the oldest email they've sent you :

May 15, 2017, 6:47 pm by stjarne
Avatar Border
User Avatar

thank you very much Keith for looking out for us. changed mine just now.

stay safe everyone!

May 15, 2017, 6:46 pm by Hawke
User Avatar

Thanks for the links!

May 15, 2017, 6:44 pm by Hunger
User Avatar

Thank you so much for looking out for us! Usually I never know about these things, so thank you<3

My current email seems to be ok, but it says my old one was pwnd 3 times...the email I can't access anymore, so I'm not sure if it makes a difference :/ I would change that password if I could

May 15, 2017, 6:44 pm by Moin
User Avatar

The lost password form isn't working right now. I have tried disabling my Adblock in case that was causing problems but it's still just going to a blank page when I enter my email. Sucks because I logged out to request a new password because I have difficulty remembering which ones I use for which sites and planned on just resetting it. Now I'm stuck on mobile only until I either guess it or the form works again. But guessing it sounds like a good way to get locked out completely so that doesn't sound fun.

May 15, 2017, 6:41 pm by Straywillow
User Avatar

Clear here, thanks!

May 15, 2017, 6:41 pm by Melodically
User Avatar

I didn't know about that website. Thanks so much for the information!

May 15, 2017, 6:40 pm by Sunfire103
Avatar Border
User Avatar

Looking up email address, general spam issues and well of couse neopets show a hit on most LOL.
My usernames don't show much except a couple of a sites I never signed up for, so looks good for now anyways.

May 15, 2017, 6:40 pm by janine
Avatar Border
User Avatar

How does the PWNed page work... I checked both my emails and the only places that came up were Tumblr and Myspace. Both I knew about before and dealt with at the time. Is there more to that page that I don't know about?

May 15, 2017, 6:38 pm by Jules
Avatar Border
User Avatar

I have several email addresses... I have 4 that I use most and 3 of them have been pwned :( I already dumped all my yahoo addresses except one because of their problems but that one checked out ok. What to do what to do.... Should I switch my stuff off of my pwned accounts (which means updating a lot of email addresses on many many sites used for all kinds of shopping activity, accounts, and such, not to mention my main internet provider email, argh)???? :( Help?

May 15, 2017, 6:38 pm by Life
Avatar Border
User Avatar

OH ALSO thank you for the heads up and the information!

May 15, 2017, 6:37 pm by Wolfmyth
Avatar Border
User Avatar

So apparently my email was pwned 6 times (bloody neopets being one of them). Tumblr...which I never use, and then 4 that were...from something. I have changed my passwords...so everything should be good now...right?

May 15, 2017, 6:37 pm by Life
Avatar Border
User Avatar

Does anyone know how to find out the date you joined tumblr? It says my email was part of a breach on tumblr in 2013 but id think my account is that old.

May 15, 2017, 6:36 pm by Marlboro
Avatar Border
User Avatar

Thanks Keith!

May 15, 2017, 6:35 pm by arixen
User Avatar

Thank you so much, Keith. The prompt attention and action to protect users by you and by Subeta staff is always very much appreciated.

May 15, 2017, 6:35 pm by Ferinsy
Avatar Border
User Avatar

Thanks for the link. It seems I was pwned only on the other pet site... But that was a year ago

May 15, 2017, 6:31 pm by FCoD
Avatar Border
User Avatar

Thanks Keith.

May 15, 2017, 6:30 pm by Zay
Avatar Border
User Avatar

Thanks for the heads up, just updated mine!

May 15, 2017, 6:29 pm by Sleeb
Avatar Border
User Avatar

Updated.

May 15, 2017, 6:25 pm by Skylar
User Avatar

Thank you for addressing this issue quickly and the link to the pwned site!

May 15, 2017, 6:25 pm by Doe
User Avatar

Interesting for the Pwn site, though it has a few websites I've never been on before. Thanks for the heads up, so I changed my pass.

May 15, 2017, 6:25 pm by Katala
Avatar Border
User Avatar

just earlier today someone requested to change my facebook password. not sure if this is related, but i went ahead and changed my password there too

May 15, 2017, 6:24 pm by Lariel
User Avatar

Password is officially changed--Darn my love fo rcute sites, using the same username--I haven't used most of those sites in a loooong time and I never put money on them, thank goodness. Thank you, Keith! ^_^

May 15, 2017, 6:23 pm by Dr.Oru
User Avatar

Waah, I see! Thank you very much for taking time to explain it to me ; VVV ; b

May 15, 2017, 6:23 pm by Jules
Avatar Border
User Avatar

Just checked my email that i use for this site and it said.. Oh no — pwned! Pwned on 3 breached sites and found no pastes My Internet service provider being one of them argh There is an option to sign up to be notified if this happens... anyone use this place?

May 15, 2017, 6:22 pm by placebo
Avatar Border
User Avatar

and i only had changed it a few months back.

i have 5 email addresses i use for various stuff. it seems just 2 are safe u.u i suppose i should get rid of at least 2 of the pwned ones u.u le sigh

May 15, 2017, 6:22 pm by Maskros
User Avatar

That is scary! Thank you for the alert.

May 15, 2017, 6:22 pm by potata
User Avatar

funny bc i had websites in that list i never even visited LOL but thnx for the heads upppp

May 15, 2017, 6:20 pm by Devilish
User Avatar

How is it possible that my email has been owned by 4 sites I've never even been a member of? LOL.

May 15, 2017, 6:20 pm by Tempest
Avatar Border
User Avatar

Sorry, didn't ping right.

May 15, 2017, 6:19 pm by Preck13
User Avatar

already changed it

May 15, 2017, 6:19 pm by Tempest
Avatar Border
User Avatar

It means that your email was included in those 3 security breaches when they happened. It doesn't necessarily mean that someone has your information and is going buckwild, it just means that it was included in the list when those sites were attacked.

May 15, 2017, 6:18 pm by Jules
Avatar Border
User Avatar

pw changed... but now I won't remember it and have to look it up all the time lol I changed my pin a few months ago.... should I change it again?

May 15, 2017, 6:17 pm by stars_water
User Avatar

Yandex? Linux Mint? Minecraft? Tumblr? Jeez, what the heck is up with this list? I guess I know what I'll be doing for the next half-hour. -groans-

May 15, 2017, 6:17 pm by Calico_803
User Avatar

Changed my password. Thanks for warning.

May 15, 2017, 6:15 pm by Dr.Oru
User Avatar

I've re-read it a lot but I don't understand ;;;; Could someone explain to me if, by inputing my email on the "PWNED" site and it shows up as 3 pwned, what does that mean? I understand it's not something positive qqq

May 15, 2017, 6:15 pm by Bathory
Avatar Border
User Avatar

searches email and finds it pwned due to mongodb and neopets damn my love of petsites

May 15, 2017, 6:14 pm by MagnusTheRed
User Avatar

Just a flash in the pan, then.

May 15, 2017, 6:14 pm by Mythology
User Avatar

Thanks for the alert! And, password changed.

May 15, 2017, 6:11 pm by Kilala
User Avatar

How scary!! Thank you for the warning!!

May 15, 2017, 6:11 pm by Kilala
User Avatar

How scary!! Thank you for the warning!!

May 15, 2017, 6:10 pm by Rocketlauncher
User Avatar

Don't forget to change your PIN as well, or add one at least for changing your passwords.

May 15, 2017, 6:10 pm by manipulation
User Avatar

I like potatoes

May 15, 2017, 6:09 pm by frederick
User Avatar

Also: avoid reusing passwords! When hacks happen people use the leaked databases to check other sites using the username/password pairs to see if they work. Unique passwords may not be so important for petsites, but they very much are for places like banks, Amazon, and your email.

May 15, 2017, 6:09 pm by Damon
Avatar Border
User Avatar

Damn scary! Thanks for the heads up!

May 15, 2017, 6:08 pm by loopa
User Avatar

thanks for the warning and the website for being pwned....changed my password just in case!!

May 15, 2017, 6:07 pm by Wonder
Avatar Border
User Avatar

Thank you Keith!

May 15, 2017, 6:07 pm by acid
User Avatar

both concerned and somewhat entertained that there's a real internet resource named "have i been pwned" -- thank you for this alert!

Leave a Comment

Use @username to mention someone. Supports markdown formatting.