
FIrefox passwords leaked
ALL of my stored Firefox passwords were leaked last week and I've been doing damage control on misc sites that didn't have two-factor. I learned Mozilla sold our data, something they said they wouldn't do. Google said it was a data breach. When did this data breach occur and why weren't we notified? I only store my password in Firefox.
All Replies (2)
Listen, we didn't sell your passwords. They are encrypted on our servers and Mozilla can't decrypt it.
Modified
https://blog.mozilla.org/en/products/firefox/update-on-terms-of-use/
TL;DR Mozilla doesn’t sell data about you (in the way that most people think about “selling data”), and we don’t buy data about you. We changed our language because some jurisdictions define “sell” more broadly than most people would usually understand that word. Firefox has built-in privacy and security features, plus options that let you fine-tune your data settings.
Mozilla made a terms of use for Firefox for the first time and now some people are coming to conclusions of Mozilla doing improper things due to how they or others are interpreting things.
Earl said
ALL of my stored Firefox passwords were leaked last week and I've been doing damage control on misc sites that didn't have two-factor. I learned Mozilla sold our data, something they said they wouldn't do. Google said it was a data breach. When did this data breach occur and why weren't we notified? I only store my password in Firefox.
Mozilla does not sell information like people are thinking, especially not private information like accounts with username, email and password.
What likely happened was one or more sites you have accounts with had a data breach in which your emails and passwords was collected then. This is why you should try and use a different password for each site account..
https://support.mozilla.org/en-US/kb/manage-your-monitor-notifications https://support.mozilla.org/en-US/kb/resolve-breaches-firefox-monitor You can check your emails at https://monitor.mozilla.org/breaches and https://haveibeenpwned.com/