An account that I never created was compromised.... Creepy!
Something very interesting, and fascinating just happened in my own little bubble here in cyberspace. Now, being in the field of Computer Science, and having a fascination for Cyber Security, and Cyber Warfare, you would think that I would have all of my accounts very secure... so I thought...
Today, I was having a little fun with "haveibeenpwned.com," I was typing in my junk email addresses that are not quite so important to me. One of the emails I entered, returned that it was linked to TWO breached sites in 2015, Nexus Mods, and MPGH... "hmmmm... MPGH... who's that?" I thought. So I browsed to MPGH.net, and saw a wealth of hacks and cheats for games "GOLDMINE!" But, I did not come here to examine all of the sweet tasty hacks here, I came to see if somehow an account was created here without me knowing. First, I entered my default login details to no avail... "well, must have been a glitch from ihavebeenpwned, surely I would have been able to get in," so I thought... Before closing the window, my eye spotted a reset password link, and I thought, "heh, well... lets try it!"
To my amazement, the password reset worked, and at this point, I felt that I had to verify that the server did not simply generate a new account when i attempted to make a reset. When I logged in, and changed my password, I noticed that I had a single Notification: "Welcome To MPGH!" Dated... 01-26-2011.
"That's right..." I thought, 2011! This was during a dark time when I lived in the middle of nowhere, with very little connection to the internet, as all I had was a dialup line that could hardly make 32k. Not only that, I was no longer interested in multiplayer games, and played everything offline, mostly Oblivion.
So, here I am, posting with an account that is apparently mine, that I never setup... creepy right? It really makes a clear picture for me personally, about how an email is quite important. I have no clue how many other accounts were created under this same email, which could definitely wind me up into some serious trouble if accounts are made for illegal activity under my email tied to my real name.
Best thing to do: keep your passwords rolling.
[I wonder if it says that I have been a member since 2011]