<story><title>Disqus Security Alert: User Info Breach</title><url>https://blog.disqus.com/security-alert-user-info-breach</url></story><parent_chain><item><author>cristoperb</author><text>I just learned about this thanks to an email from &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;haveibeenpwned.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;haveibeenpwned.com&amp;#x2F;&lt;/a&gt; alerting me that my account info was leaked.</text></item></parent_chain><comment><author>toyg</author><text>I had three emails from HIBP today, for 3 different breaches: Disqus, Kickstarter and Bitly. Three, in a day. These breaches are all &lt;i&gt;years old&lt;/i&gt; and at least one of them was set to one of my old passwords I reused in a lot of places (before moving to a pwd manager), so it could have done some real damage. The fact that it didn&amp;#x27;t happen, makes me think that salted hashing did what it was supposed to do, discouraging bruteforce decryption just enough.&lt;p&gt;Still, the state of the industry is pretty shocking. We are doing more and more stuff (super-encryption at rest, constant password rotation, password managers etc) and still breaches happen with regularity. It feels a bit like when Office started having a system to recover documents after a crash - yeah, great, but why is the crash happening so often that we need it in the first place?</text></comment>
<story><title>Disqus Security Alert: User Info Breach</title><url>https://blog.disqus.com/security-alert-user-info-breach</url></story><parent_chain><item><author>cristoperb</author><text>I just learned about this thanks to an email from &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;haveibeenpwned.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;haveibeenpwned.com&amp;#x2F;&lt;/a&gt; alerting me that my account info was leaked.</text></item></parent_chain><comment><author>cisanti</author><text>And I learned it from your comment. Just tried haveibeen and confirmed disqus leak. No emails from disqus!</text></comment>