Ride it, my pwn'y

Ride it, my pwn'y
Photo by Markus Spiske / Unsplash

Troy Hunt runs a top-notch service. I love it, even when it ruins my morning. 

';--have i been pwned? 
An email on a domain you're monitoring has been pwned 
You signed up for notifications when emails on bendigohealth.org.au were pwned in a data breach and unfortunately, its happened. Here's 
what's known about the breach: 
Breach: 
Date of breach: 
Accounts found: 
Your accounts: 
Compromised 
Anti Public Combo List 
16 Dec 2016 
457 962 538 
52 
Email addresses, Passwords

 Dang. 

 

Fortunately, Troy provides admins the option to download an Excel file, which means you can turn it into this: 

Email 
amahoney@bendigohealth.org.au 
amilsom@bendigohealth.org.au 
aminnis@bendigohealth.org.au 
andrew.gibbs@bendigohealth.org.au 
aulvestad@bendigohealth.org.au 
awaugh@bendigohealth.org.au 
blusher@bendigohealth.org.au 
bryan@bendigohealth.org.au 
cdridan@bendigohealth.org.au 
cfraser@bendigohealth.org.au 
cfstyles@bendigohealth.org.au 
dantoniazzi@bendigohealth.org.au 
dgoodwin@bendigohealth.org.au 
dlloyd@bendigohealth.org.au 
dparker@bendigohealth.org.au 
drosaia@bendigohealth.org.au 
dsheard@bendigohealth.org.au 
estanyer@bendigohealth.org.au 
gcanny@bendigohealth.org.au 
golsen@bendigohealth.org.au 
hhorgan@bendigohealth.org.au 
isolo@bendigohealth.org.au 
v Breach 
Anti Public Combo List 
Anti Public Combo List 
Anti Public Combo List, Dropbox, Neopets 
Anti Public Combo List, Linkedln 
Anti Public Combo List 
Anti Public Combo List, River City Media Spam 
Anti Public Combo List 
Anti Public Combo List, MySpace 
Anti Public Combo List, Linkedln 
Anti Public Combo List, Linkedln 
Anti Public Combo List 
Anti Public Combo List 
Anti Public Combo List, Linkedln 
Adobe, Anti Public Combo List, Last.fm, v8ulleti 
Anti Public Combo List, Linkedln, MySpace 
Anti Public Combo List, Linkedln 
Anti Public Combo List 
Anti Public Combo List 
Anti Public Combo List, MySpace 
Anti Public Combo List, Linkedln 
Anti Public Combo List, Linkedln 
Anti Public Combo List

 and into this: 

Untitled - Notepad 
File Edit Format View Help 
amahoney@bendigohealth . org.au 
amilsontbendigohealth . org.au 
aminnis@bendigohealth . org.au 
andreı.'.gibbs@bendigohealth . org. 
aulvestad@bendigohealth . org.au 
auaugh@bendigohealth . org.au 
blusher@bendigohealth . org.au 
bryan@bendigohealth . org.au 
cdridan@bendigohealth . org.au 
cfraser@bendigohealth . org.au 
cfstyles@bendigohealth . org.au 
dantoniazzi@bendigohealth . org. 
dgoodwin@bendigohealth . org.au 
dlloyd@bendigohealth . org.au 
dparker@bendigohealth . org.au 
drosaia@bendigohealth . org.au 
dsheard@bendigohealth . org.au 
estanyer@bendigohealth . org.au 
gcanny@bendigohealth . org.au 
golsen@bendigohealth . org.au 
hhorgan@bendigohealth . org.au 
isolo@bendigohealth . org.au 
janderson@bendigohealth . org.au 
jarnold@bendigohealth . org.au

Into this: 

ESemai I 
Foreach (Suser in C: \ Local \pwn. txt)) 
Get—AdUser —Fi Iter {Emai laddress —eq Suser} 
Semail I 
Set-ADCs er —ChangePasswordAtLogon 
Get-ADUser 
St rue

Into this: 

Subject 
Good morning, 
Breach notification 
At 9:09am this morning Bendigo Health was notified that your 
e-mail address and password has become public. In order to 
safeguard your account, your password has been set to 
change upon next logon. It is HIGHLY advisable that you 
change the password of any personal accounts that were 
reusing your Bendigo Health password. If you have any 
questions, feel free to give us a call. 
Thanks, 
Grant Lockwood 
Senior Systems Engineer 
Bendigo Health 
POBox 126 3552