[Closed] Might want to reset your wiggle password...

Again?

Think I might have got lucky, went to check and couldn't log in!

Password reset worked, and no dubious transactions to worry me (although wish I could claim it wasn't me who had ordered the DHB glasses, save me the bother of returning them...).

Annoyingly I have never deliberately saved a card on the site but there was one there in my saved cards anyway. Deleted it but really wish it wasn't the default to save a card to the site...

Good reminder.

Just deleted all our cards from the account and reset my password!

Will just use Paypal in future....

Look on the plus side, this is the perfect time to tell your wife some asshole hacker ordered a new bike through your hacked account that'll turn up next Friday

😉

Password changed.

Reading the article, it doesn't look like wiggle have been hacked - just that someone has done a credential spraying attack on their site using credentials from other breaches?

Still, reinforces why unique passwords for each site are important.

Does this apply to the CRC arm of wiggle as well?

Reading the article, it doesn’t look like wiggle have been hacked

Imagine taking the time to read past the first two words of a headline, instead of rushing here claiming wiggle have been hacked

Yeah, I removed all my cards form them the first time they messed up. Strictly PayPal only.

CRC seem to operate as an entirely separate business (different login accounts, different component selection, different prices etc), despite being owned by the same people.

I got confused recently though, when you use PayPal through CRC, it gets processed as coming from Wiggle.

I recently went through all my online accounts (all 200+ of them which are saved by my computer, probably half of them were shops of some description) - loads of them had shared passwords. I spent a couple of hours tediously changing them all. I would never have remembered every website I've signed up to without that list so I'm sure there are loads of people who are vulnerable to this sort of attack and don't realise it.

Thanks superficial, I wondered as the statement I received with goods Recently says wiggle at the bottom.

Can't remember the last time I used Wiggle. Tried to log on, predictably couldn't remember password but then I'm not sure of the email address I used either.

Anyway, reset and it clearly remembers me cos my address and phone number are there but it's showing no orders or returns in ages so all seems OK.

Not heard of https://haveibeenpwned.com/ linked in the article. Have people tried it? At first glance it sounds exactly the sort of site I'd be avoiding

CRC have the same stock as wiggle. There are some quirks that appear to mean stock doesn't appear on the product pages but it does on the list pages.

Sorted thanks

Not heard of https://haveibeenpwned.com/ /a> linked in the article. Have people tried it?

It's legitimate site, well worth checking to see if your email address is on any known hacked user credential lists.

Not heard of https://haveibeenpwned.com/ linked in the article

Genuine site that will show if your password is compromised anywhere

Yes, that website is good. My primary email address has been the subject of 8 data breaches. Annoying.

All that data from EasyJet now being tried on market sectors like Cycling, Climbing, snow sports...