URGENT PLEASE CHANGE YOUR PASSWORD EMAIL

[ADDLED]

Hi all. I received an email this evening from [e-mail]; "Your account could have been hacked, compromised or stolen." Footer of the email showed [e-mail] to reply to.
Its hardly the end of the world if Russian spies have hacked my account to give their opinions on Trabants and other stty Soviet-era cars, but this is more worrying:

"We have been informed of a security incident on another website unrelated to PistonHeads. We have detected that you're using the same password on PistonHeads and the compromised website, so your account is at risk. "

I'm concerned that Pistonheads dont seem to have encrypted my data. What do other people think?
tks
ADD

[DT1975]

I used the same password to set up an account elswhere for my missus. As far as this place was concerned my password was compromised and it didn't stop until I changed it.

[AlexRS2782]

Might be related to this - https://www.pistonheads.com/gassing/topic.asp?h=0&... - that happened earlier this year as CarGurus, owners of PH, were hacked.

Your profile shows no posts over the last 6 odd months so going to assume you haven't logged in in that time. If so it's possible that your first login today has triggered that warning email as i think most of us on here received the password reset warning back when the hack was first reported and logged in for the first time.

[tirolo_ph]

ADDLED said:

Hi all. I received an email this evening from [e-mail]; "Your account could have been hacked, compromised or stolen." Footer of the email showed [e-mail] to reply to.
Its hardly the end of the world if Russian spies have hacked my account to give their opinions on Trabants and other stty Soviet-era cars, but this is more worrying:

"We have been informed of a security incident on another website unrelated to PistonHeads. We have detected that you're using the same password on PistonHeads and the compromised website, so your account is at risk. "

I'm concerned that Pistonheads dont seem to have encrypted my data. What do other people think?
tks
ADD

"We have been informed of a security incident on another website UNRELATED to PistonHeads. We have detected that you're using the same password on PistonHeads and the compromised website, so your account is at risk. "

Keyword there being: UNRELATED

ADDLED said:

I'm concerned that Pistonheads dont seem to have encrypted my data. What do other people think?
tks
ADD

We follow latest industry standard recommendations for storing passwords, no need to worry about that. We also use a third party service to check whether passwords available in public data leaks matches the one you are currently using so we can let you know and ask you to change your password before someone uses it to access your account here. btw this is one of the reasons why we moved away from allowing you to login with your username: publicly available username + publicly available password = easy access to your account

[Ramona]

Not sure whether it might be related, but I have just received a spam message (allegedly from "TikTok Shop") sent to an email address that I only ever use on Pistonheads - it has never been used anywhere else.

I'm wondering how/where the spammer acquired it?