Forum data breach?

[Sue]

I just set up a new gmail account, and in the tedious process that started off, I received these messages:

Change 2 compromised passwords

Some of your saved passwords appeared in a data breach from a site or app that you use.

You should change them now.

and

Some of your saved passwords were exposed in a non-Google data breach. You should change them now.

This account is at risk

eastdulwichforum.co.uk

Sue

Can anybody shed any light?

[RichH]

The most likely possibility is that the password you're using to login to this site is the same as one that's been discovered in a data breach of another site and Google/Gmail is checking against a database of known breached login credentials.

You can check yourself and find out more information here:

https://haveibeenpwned.com/Passwords

Just change your password for this site; the longer the better.

[Sue]

RichH Wrote:

-------------------------------------------------------

> The most likely possibility is that the password

> you're using to login to this site is the same as

> one that's been discovered in a data breach of

> another site and Google/Gmail is checking against

> a database of known breached login credentials.

>

> You can check yourself and find out more

> information here:

> https://haveibeenpwned.com/Passwords

>

> Just change your password for this site; the

> longer the better.

Thanks, I had already changed it, I just wondered what the data breach was!

Thanks for the explanation!

[ianr]

I'm not fully sure, after reading https://support.google.com/accounts/answer/9457609?hl=en, what Google's exact criteria are for issuing an alert in a given case. But I don't see how they can issue the specific one above without having some knowledge of the password Sue has been using here.

Could someone else, who has for some time been using a relatively hard password on EDF, one thst they've not used anywhere else, try the experiment of similarly trying to open a new gmail account using that password?

[Sue]

To be clear, the password I used for the new Gmail address was not one I've used anywhere else.

I have three Gmail addresses now, but I'm a bit confused as although they recognise me, they don't seem to be relating the new address to the two existing addresses, so I'm actually wondering if I should have used the same password as for the other two.

It's all too complicated for me. I think I'll go and lie down in a very dark room.