As user privacy abuse and data breaches become more and more commonplace we are being conditioned to be less and less surprised. If you had an account at popular photography sites 500px or EyeEm, you might want to read this.
We were informed directly and proactively by some of our 500px contacts about a recent article that was published on The Register highlighting the actions and exposure of a hacker selling a historically large database of usernames and passwords. The hacker, claiming to need the money, was able to exfiltrate over 620 million user account details from 16 sites, and currently has them all for sale on the dark web.
500px and EyeEm were the only photography sites on the breach list. I personally have accounts on both networks although I'm no longer actively posting. I was not alone as EyeEm saw 22 million accounts exposed, and 500px had 15 million. Both 500px and EyeEm have responded with a mandatory password change. This is a great idea considering many users may never hear about the breach in the nature of today's infinite news cycle.
I visited EyeEm and noticed I had used Facebook to login so there would be no password included in the stolen database. This is a good reason to consider using that same option in the future. After all, we can always trust Facebook. Right?
As you're making new accounts online for posting your photos or whatever, make sure you are using unique site-specific passwords. If your current accounts need a 2019 reality check, do it now while you are thinking about it.