A suspected ShinyHunters hacker was arrested — is your data safe?

A suspected ShinyHunters leader was arrested in the Netherlands. Leaked data does not come back, so check haveibeenpwned.com, fix reused passwords, and lock down email and banking.

A suspected leader of the ShinyHunters hacking group — a crew tied to several notorious data breaches — has been arrested in the Netherlands. That is genuinely good news for everyone. But an arrest does not claw back the data already leaked: any account ever exposed in a breach stays exposed.

Take thirty minutes today to tighten up. First, type your email into haveibeenpwned.com to see which of your accounts were caught in breaches. Second, change any password you have reused anywhere — reusing even one password lets attackers try it on every other site you use.

Finally, turn on passkeys or two-factor authentication on your email and bank accounts first, since those two unlock almost everything else.