Jagex leaked database?

What do you guys think?

 

edit appears u were right : [14-JUN] PASSWORD RESET REQUESTS

 

Yeah, as long as you changed your email password in the past year you should be good. Granted website databases leak fairly often so you gotta change your email password every so often. 2FA for emails is a safe practice too.

 

Looks like i got a pass request as well. Apparently it's happening mainly to username logins, therefore i believe it's a username leak and not a password leak. People are probably just clicking "forgot password".

"Older accounts usually have emails that have been deleted by the email servers for inactivity.

What these people will do is send recovery emails to accounts that don't have an active email anymore, re-create the email, and then recover the account as they will have access to the newly created, original email. Be careful out there, and make sure you enable authenticator on both your account and your email! "

Just change your pass to be extra safe and you should be good. If anything it's probably osbuddy leak lmao.

 

Wait what aat

 

Quality stress from a quality company. I wouldn’t expect any less from them.

 

I've been getting these password resets across 3 of my accounts. Not sure what the point is, since my PC isn't keylogged/ratted so they would have no idea what I change the password to. Been happening to me for a couple months now though.

 

Ive had 3 or 4 accounts get requests but all are banned accounts hahaha, pretty damn funny if you ask me. And ya it was email/login leak nothing to do w your pc buddy

 

2 of mine are relatively new which is why I'm surprised. I don't understand why they're repeatedly sending it though when they don't have access to those email accounts.

 

It's likely these attempts are done in bulk by a program probably 1k+ accounts at a time. You'd be surprised how many they'd compromise out of those 1000.

 

I mean lots of people don't auth/2fa accounts and they lose em real quick lol. Matter of laziness

 

Yup, got hacked because of this. They found my completely unrelated email, probably got in through other leaks and changed all my pass and disabled my auth (no auth delay good job). Got through bank pin too, rinsed for everything. Happened yesterday, they didn't even get it removed they just straight up when through it.

 

Is that even possible to create the same email again?

 

It depends on two factors, the first factor is which email provider it is. Secondly, once an unused account reaches the threshold of inactivity to be deleted and how long it will be from the inactive state to the actually deleted state. There is usually alot of cross referencing from multiple sources that has to be done in order for this to all work.

 

So if your email gets deleted by the provider itself for being inactive. You came make the same email. But in this case i dont think it is still linked to the rs account? Otherwise someone else could create the same email and steal the account. right?

 

near enough so many legacy websites and databases get breached, for the past few years i ensure that my passwords change via a third party password manager.. these phishing emails are getting extraordinarily sophisticated and making a few sites emails almost redundant.

 

Wich password manager do you use? and how can you make sure that you can trust these managers?

 

Personally i use LastPass, this was a question i used to ask myself at the start.. basically they store them almost like a fully encrypted block of code/data , if someone tried to breach that sort of data they could on extract minute parts of the passwords.. i guess ultimately it comes down to how secure your passwords are... i will never forget a close friend of mine who had the most secure passwords ever but then his security question was favorite food.. i literally guessed Pizza and it worked...

It comes down to yourself at the end of the day and what you feel secure in doing but hands down i would recommend doing your best with what youve got and the knowledge its better to be secure.

 

True true , since joining sythe my password are more secure than ever i try too not put personal info in my passwords. But maybe i will take a look at a password manager or something like that. To make even more secure

 

Good luck! and yes definitely would recommend looking further into them, just ensure you do your research for which one suits you best dependent on your most frequent applications and websites ect.