Ask HN: Someone is systematically trying to access my accounts, any advice?

4 pointslouisharwood9y ago2 comments

On Tuesday morning I received a couple of 'login attempt' emails on my gmail account. They were unsuccessful and had locations in India... I've had a couple of these in the past so didn't think anything of it.

Fast forward to this morning. My Apple ID password had changed (I've now enabled two factor auth and changed the password along with other security questions/details). I've also gone through any accounts I can think of and have ensured that they all have new passwords and have enabled two factor auth where available.

I'm continuing to receive password reset requests or security alerts (but none seem successful) for, amongst others, LinkedIn, Spotify, Netflix and other various email accounts.

This seems very targeted and I'm worried that someone already has access to something or I've missed an account that could be secured further.

Does anyone have any advice/tips on what I can do further to secure my accounts, not miss any accounts or attempt to discover who/why this happening?

2 comments

MikeTV9y ago

Changing all your passwords and enabling 2FA was the right step. Make sure all the passwords are strong and that you set a different password for each site (a password manager like KeePass makes this easier).

As to where it came from, check to see if your email address is in the breach database at https://haveibeenpwned.com/

znpy9y ago

Next step, imho, should be to go to the police or something like this.

j / k navigate · click thread line to collapse