The Register is reporting that sellers on the dark web are offering user account databases containing information on 617+ million accounts from websites like Dubsmash, 500px, MyFitnessPal, MyHeritage, and others:
This kind of thing is so common now that the odds are extremely good that anyone who's been using the web for more than a few years has had their user account data compromised. If you're curious whether your data has ever been compromised, Have I Been Pwned may be able to tell you:
This is why it's more important than ever to use strong — and most importantly — unique passwords for every website. I can't stress enough how important it is not to reuse passwords! Some of the websites you use will get hacked, and if you use the same password on multiple sites, that could allow hackers (or anyone who obtains the hacked data) to gain access to your other accounts.
My 500px account was among the accounts compromised in this breach, but I'm not terribly worried because I know that my 500px password was only used on 500px. There's no chance anyone can use it to gain access to my other accounts. I use 1Password to generate strong unique passwords for every service I use (and to remember them for me!). If you don't already use a password manager, I highly recommend checking it out: