Another spam email fraud

[Nick]

https://haveibeenpwned.com/

That site is run by Troy Hunt, a long standing and highly regarded security professional - he was Microsoft's MVP of the Year a few years ago (MVP=Most Valuable Professional) and is a Microsoft Regional Director. Basically, it's a good and trustworthy site.

If HaveIBeenPwned says you have a compromise, at some point you did. Remember though that many lists are compendiums of previous hacks, so it may be that if you crop up in a recent list, you are still OK.

The old rules still apply: Don't re-use passwords, don't do silly things like share accounts, don't write your passwords down, don't use stupidly simple passwords (try using three words concatenated - easy to remember, e.g. herringwightMouse), change passwords occasionally.

Use a password manager - it's easy - I use LastPass but there are several good ones out there. I do not put the one or two key passwords I have for financial information and my master email account in there, so if in the unlikely event LastPass is compromised, it's not a real problem for me.