have to change passwords AGAIN? (email, error, security, browser)

[Flamingo13]

I have a ton of passwords for a ton of sites (that's a whole 'nother rant about stupid sites needing a password), after this most recent breach, do I have to change them again? I did change two: bank and health records. This is getting old - I have 6 email address on AOL, do I have to change all of them??

[NHDave]

If you're referring to this 1.2 billion logins scooped up by CyberVor hacking crew – what you need to do | Naked Security

It isn't even known which sites the data came from, I suppose if you want to be overly cautious you could go on a password changing spree.

[Flamingo13]

Thanks NHDave, you're always so helpful

[NHDave]

I doubt banking/financial sites are affected. Even if someone got my banking password there's no way they could correctly answer the security questions to actually get logged in from their web browser as my answers are gibberish.

As an example, the answer to my fathers middle name would look like: 4Gm!w98?P@47xN.
All of these answers are stored in a local encrypted, password protected file.

[NHDave]

You might want to read this as well, there's something fishy about this whole incident.

Wonder if you're a victim of the "billion password" breach? Pay $120 to find out

Basically, Hold Security is using a paid service for people to see if they're affected, profiting from the stolen data they acquired. The submission page is a prime example of how not to set up a submission page without looking like a scam. A number of grammar and punctuation errors, and a notice saying they'll never ask for your passwords right before the form where you have to enter your passwords

[adyn]

All my passwords are hunter2, no one has ever hacked any of my accounts.