15 million records later

By now everyone has written about the data of 15 million people leaking. My DMs filled up with "you're the specialist, say something", so here are a couple of thoughts.

Few people here worry about their privacy, and a lot of people leave their personal details everywhere. The first fix is basic security knowledge for everyone: turn on two-step verification, never tell anyone the code from an SMS, and don't trust everyone who writes to you.

That alone would cut cybercrime. Most of it comes down to the human factor, because, as everyone keeps repeating, nothing is easier to hack than a person. Call someone "hoji aka" a couple of times and they will tell you a lot.

Next, most of us use very simple passwords. That is dangerous now, because guessing them by brute force has become easy. On top of that we reuse one password in many places, which is worse.

As for the leak itself: fair enough, the human factor played a smaller part this time. But I can't pretend the people responsible for securing those systems carry no blame. Fifteen million is not a small number. It is roughly two in every five people you pass on the street, with their details for sale on the dark web. There is a real chance you and I are among them.

It is too late to take it back. They have everything. So, today:

• change the PIN codes you use for government services,
• check every device connected to your accounts,
• turn on the service that lets you control who accesses your data,
• and turn on the ban on loans being issued in your name. Banks might not give you a loan anyway, but turn it on.

And from now on, stop leaving your data everywhere. If someone offers you free cheese, don't take it. Don't open links people send you, and if you do, don't type anything in. Don't open APK files people send you. Don't download programs for your computer from random sites.

Stay healthy, and be careful from here on.