Dark Web Monitoring

[misanman]

I am a premium subscriber to LastPass and it has worked well for me over the last couple of years. They are offering a "Dark Web Monitoring" option that I selected not long ago.

As a result, I just received 59 emails from LastPass of the following format:

"Breach alert: Action required

LastPass has detected that your personal data has been compromised in an online breach.

FINDINGS
Compromised email: xxxxx
Compromised site: yyyyy.com
Compromised data: Emails, Passwords, Usernames"

The suggested solution is to log on to the site and change passwords, but I have no memory of ever signing on to the vast majority of the sites and the email addresses referenced (see xxxxx above) are often text strings such as "admin".

I guess I'm tempted to just act on the ones that make sense and file the other notices away, but I'm wondering if there's anything else I should do?

Pretty interesting that there is info that can be identified as mine plastered all over the dark web.

So, any suggestions as to how to handle? At

 

[Sunset]

If you use different passwords for every site, the damage is contained.

I get the same notices, usually affecting some junk site that I made up a junk email and junk password to read/see something.

Haven't had it tell me about a "real" email and serious site yet.