TL;DR
Keep up-to-date with security breaches using Have I Been Pwned (HIBP), SecurityWeek, BleepingComputer, and the official websites of major companies you use. Regularly check your email for breach notifications.
Finding Information About Security Breaches
- Have I Been Pwned (HIBP): This is *the* place to start. It lets you check if your email address has been involved in known data breaches.
- Website: https://haveibeenpwned.com
- Simply enter your email address and see if any breaches are reported. It’s a quick way to assess personal risk.
- SecurityWeek: A news site covering cyber security threats, vulnerabilities, and data breaches.
- Website: https://www.securityweek.com
- Focuses on professional-level reporting of significant incidents.
- BleepingComputer: Provides news, tutorials and resources related to cyber security.
- Website: https://www.bleepingcomputer.com
- Often has detailed coverage of ransomware attacks and data leaks.
- Company Websites & Official Announcements:
- Check the security pages or news sections of companies whose services you use (e.g., Google, Microsoft, Facebook/Meta, banks). They will often post about breaches directly.
- Sign up for email alerts from these companies if they offer them.
- Data Breach Notification Websites:
- Privacy Rights Clearinghouse: https://privacyrights.org/data-breaches – Provides a chronological list of publicly reported breaches.
Staying Proactive
- Regularly Check HIBP: Don’t just check once. Repeat this every few months, as new breaches are discovered constantly.
- Strong Passwords & Multi-Factor Authentication (MFA):
- Use unique, strong passwords for each account. A password manager can help with this.
- Enable MFA wherever possible. This adds an extra layer of security even if your password is compromised.
- Be Wary of Phishing Emails: After a breach, attackers often send phishing emails pretending to be from the affected company.
- Never click links or download attachments in suspicious emails.
- Contact the company directly through their official website if you’re unsure about an email’s authenticity.