Contact Us

Did Russians REALLY Steal 1.2 Billion Passwords? FORBES Expert Says, ‘So What?’

FORBES says don't panic over huge Russian security breach
FORBES says don’t panic over huge Russian security breach (Getty Images)

According to a  security firm,  Russian hackers have reportedly stolen 1.2 billion passwords, hacked from some 420,000 websites and more than 500 million email addresses. But is it really THAT bad?

Hold Security, a firm in Milwaukee, Wisconsin, reportedly has a history of discovering significant security and data breaches, leaks and thefts.   They say the Russian hackers targeted a variety of sites – anything they could get their hands on, from Fortune 500 companies to small firms.

Even the Better Business Bureau of Eastern Washington issued a warning to consumers about revising or changing their passwords for sensitive information.  From a brief they issued Friday:

“… According to the Hold Security, its Deep Web Monitoring program discovered what could be the widest-ranging global security breach in history, affecting an estimated 420,000 websites, ranging from Fortune 500 companies to small internet sites.”

But according to Joseph Steinberg of FORBES Magazine,  it might be overblown.  While nobody should take cyber security lightly,   Steinberg gives some reasons why it might not be that bad.

1)  The extent of the damage done so far appears to be mostly  stolen passwords used to send spam on social networks.

2) It is not clear how many of the stolen passwords are current.  Unless a person re-uses an old password,  these would be useless.

3)  Many passwords are of little use to consumers.  Hundreds of thousands of websites require people to create a password just to browse for free through potential items to purchase.  Such passwords don’t compromise any identity or confidential information.

4) Most financial and other sensitive password protected systems (such as your bank) are regularly checked for vulnerability to what is called SQL Injection, a primitive method used to try to steal such data.  Because SQL Injection was used in this breach, it’s likely the hackers didn’t get deep into systems to gather truly sensitive or damaging information.

5)  Many cyber-security experts are questioning the validity of Hold Security’s claims.  Steinberg says the company didn’t immediately go public with the news of the alleged hack, nor did they make the data public so it could be analyzed for solutions.    Steinberg himself had never heard of them prior to this report.

 So what should you do?   According to Stenberg, while the breach may indeed be what Hold says it is, don’t go off the deep end:

“So, what to do now? Don’t panic, and go on with your life. Until more information comes out I would not suggest resetting passwords – they may be on systems that can be re-breached – or sending anyone encrypted copies of your passwords.”

More from Newstalk 870

Best of the Web

Leave a Comment

It appears that you already have an account created within our VIP network of sites on . To keep your points and personal information safe, we need to verify that it's really you. To activate your account, please confirm your password. When you have confirmed your password, you will be able to log in through Facebook on both sites.

Forgot your password?

*Please note that your points, prizes and activities will not be shared between programs within our VIP network.

It appears that you already have an account on this site associated with . To connect your existing account with your Facebook account, just click on the account activation button below. You will maintain your existing profile and VIP program points. After you do this, you will be able to always log in to http://newstalk870.am using your Facebook account.

*Please note that your points, prizes and activities will not be shared between programs within our VIP network.

Please fill out the information below to help us provide you a better experience.

Register on Newstalk 870 KFLD: The Mid Columbia's Newstalk Leader quickly by logging in with your Facebook account. It's just as secure, and no password to remember!

Not a Member? Sign Up Here

Register on Newstalk 870 KFLD: The Mid Columbia's Newstalk Leader quickly by logging in with your Facebook account. It's just as secure, and no password to remember!