nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

I got a Dark Web Monitoring Alert for a site I know nothing about

Hilton Jones

I received a dark web monitoring alert for a website I know nothing about. It's a very suspicious looking site and I'm not about to click on it or ask to reset its password. I did change the password for the email that was used on the site. What should I do? Ignore the report? Delete the email account that was used?

Find more posts tagged with

Accepted answers

dan.demichele

The alert you received tells you that your email has been stored on some site, and then that subsequent site has had a security breach such that the username and password combination on that site was shared on the dark web. If you didn't create that account on that site, your email could have been used unbeknownst to you by a malicious actor and registered on some other site. In that scenario, they probably didn't know any of your passwords. But the prudent thing to do would be to make sure that the particular email address and password combinations are unique where you use them. You can see that in the security dashboard and make sure they aren't reused. You should not have to delete your email account. I hope this helps.

All comments

dan.demichele

The alert you received tells you that your email has been stored on some site, and then that subsequent site has had a security breach such that the username and password combination on that site was shared on the dark web. If you didn't create that account on that site, your email could have been used unbeknownst to you by a malicious actor and registered on some other site. In that scenario, they probably didn't know any of your passwords. But the prudent thing to do would be to make sure that the particular email address and password combinations are unique where you use them. You can see that in the security dashboard and make sure they aren't reused. You should not have to delete your email account. I hope this helps.

Hilton Jones

Thank you. I did as you suggested and changed my password for me email. Will leave the dark web site untouched! Thanks again.

Hilton Jones

Thank you!

brian.grubba

Hi, I received an alert on July 1 for a compromised password at "short-edition" which is a site I've never visited and when I requested to change my password, I don't have an account with them. I understand that it's saying my email "appeared in a security breach" but if they don't have an account with me, thus none of my personal info, is this really worth worrying about?

quentin

Helloceponatia,

Please contact directly support at Short Edition to have more information at

Cheers

Quentin

Cofounder at Short Edition

rachael.orovets

Hi @Phedra,

The alert you received tells you that your email has been stored on some site, and then that subsequent site has had a security breach such that the username and password combination on that site was shared on the dark web. If you didn't create that account on that site, your email could have been used unbeknownst to you by a malicious actor and registered on some other site. In that scenario, they probably didn't know any of your passwords. But the prudent thing to do would be to make sure that the particular email address and password combinations are unique where you use them. You can see that in the security dashboard and make sure they aren't reused. You should not have to delete your email account. I hope this helps.

Natasha Hostal

I had the same thing happen. Except with a different website - Space Time Studios. Nothing about it looks familiar and I have nothing related in my vault. I even tried to do a password reset on their forums just in case but no account is registered. Is this a false positive?

rachael.orovets

Hi@"Demonseedgfx",

The alert you received tells you that your email has been stored on some site, and then that subsequent site has had a security breach such that the username and password combination on that site was shared on the dark web. If you didn't create that account on that site, your email could have been used unbeknownst to you by a malicious actor and registered on some other site. In that scenario, they probably didn't know any of your passwords. But the prudent thing to do would be to make sure that the particular email address and password combinations are unique where you use them. You can see that in the security dashboard and make sure they aren't reused.

paul.darcy

Hi,

Thanks for the answer. It is what I thought just gotta check.

Thanks again

paul.darcy

Hi,

I have a Darkweb alert for a site I know I've never used. I have two others and I'm pretty sure I've never used them, at least not in recent years.

Do I need to worry?

Is it somebody just using my email addresses, and if so can this be stopped?

I've not had any emails come from the companies as verifications, so they either do not verify or they are getting routed to another account. Although I do have emails coming into these accounts daily.

Am I getting paranoid?

Thanks

debcohen2nd

Not only is the alert I got for a website I know nothing about, but the email account is completely unrelated to any of my email accounts. It is a full email address that is associated with the alert, but that email address has nothing to do with me. Is this a bug or a genuine security issue for me that I just don't understand?

rachael.orovets

Hi @debc11,

The alert you received tells you that your email has been stored on some site, and then that subsequent site has had a security breach such that the username and password combination on that site was shared on the dark web. If you didn't create that account on that site, your email could have been used unbeknownst to you by a malicious actor and registered on some other site. In that scenario, they probably didn't know any of your passwords. But the prudent thing to do would be to make sure that the particular email address and password combinations are unique where you use them. You can see that in the security dashboard and make sure they aren't reused. You should not have to delete your email account. I hope this helps.

You'll alsowant to check the email addresses being monitored in your Security Dashboard to see if the email in question is being monitored, and disable it from being monitored if you'd prefer:https://support.logmeininc.com/lastpass/help/how-do-i-stop-monitoring-specific-email-addresses-for-dark-web-monitoring

jandsklein

What do you mean when you say "But the prudent thing to do would be to make sure that the particular email address and password combinations are unique where you use them."? Passwords are used for sites, not email addresses, so I don't understand what you're advising the other member to do.

I had the same problem with an alert. When I tried to reset my password on the site named in the alert, it said I didn't have an account with them. If that's the case, what was the alert about?