Netflix sent password resets to those who used their Netflix password on LinkedIn, Tumblr, or MySpace
Heads up for those who tend to reuse the same password across the Web: If you want to get back into your Netflix account, you may have to change your password.
The streaming service late last week sent password resets to those who used their Netflix password on LinkedIn, Tumblr, or MySpace following major breaches of those sites, according to a report from security researcher Brian Krebs.
“We believe your Netflix account credentials may have been included in a recent release of email addresses and passwords from an older breach at another company,” the message reads. “Just to be safe, we’ve reset your password as a precautionary measure.”
Those affected by the password reset will need to head over to Netflix.com, click “forgot your email or password,” and create a new password.
“Netflix is taking this step because it knows from experience that cybercriminals will be using the credentials leaked from Tumblr, Myspace and LinkedIn to see if they work on a variety of third-party sites (including Netflix),” Krebs wrote.
Netflix isn’t alone. Reddit late last month sent out 100,000 password resets amid a boost in account takeovers by “malicious (or at best spammy) third parties” linked to the recent LinkedIn password dump. Krebs noted that Facebook also tends to reset passwords after incidents like this, so you may soon receive a message from the social network as well.
For those who haven’t been following security news, Myspace last week confirmed reports that it suffered a major data breach in 2013 and that the stolen information is now up for sale online. Myspace attributed the leak to a Russian hacker known as “Peace,” who is also reportedly responsible for recent breaches of LinkedIn and Tumblr.