# Quora hack

**URL:** <https://boards.straightdope.com/t/quora-hack/825561>\
**Category:** Factual Questions\
**Created:** [December 4, 2018, 6:19pm UTC](https://boards.straightdope.com/t/quora-hack/825561 "2018-12-04T18:19:36Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![KarlGauss](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/karlgauss/32/3713_2.png) [@KarlGauss](https://boards.straightdope.com/u/KarlGauss)\
**Post date:** [December 4, 2018, 6:19pm UTC](https://boards.straightdope.com/t/quora-hack/825561/1 "2018-12-04T18:19:36Z")

</div>

Apparently [Quora was hacked recently](https://www.cbc.ca/news/business/quora-hacked-1.4931507) and its users accounts were compromised.

If I registered at Quora using my Gmail account, can I assume the latter is now compromised as well?

Thanks

---

<div class="post-metadata">

**Author:** ![ZipperJJ](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/zipperjj/32/211_2.png) [@ZipperJJ](https://boards.straightdope.com/u/ZipperJJ)\
**Post date:** [December 4, 2018, 8:37pm UTC](https://boards.straightdope.com/t/quora-hack/825561/2 "2018-12-04T20:37:01Z")

</div>

I suspect that Quora account usernames and passwords were hacked, but not third-party account providers, no.

- If you created a Quora account with your username as [you@gmail.com](mailto:you@gmail.com) and happened to use the password for Quora that you use to log in as [you@gmail.com](mailto:you@gmail.com) then YES you need to change your Gmail password ASAP. And don’t ever do that again (use the same password for multiple sites). You’ll also need to update your Quora password (to something different from your new Gmail password!)

- If you created a Quora account with [you@gmail.com](mailto:you@gmail.com) as your username and some different password from your [you@gmail.com](mailto:you@gmail.com) Gmail login, your Gmail account is fine. Update your Quora password.

- If you created a Quora account by linking your Google or Facebook account, your username and password are stored by and protected by Google/Facebook and should be ok.

---

<div class="post-metadata">

**Author:** ![filmore](https://avatars.discourse-cdn.com/v4/letter/f/7993a0/32.png) [@filmore](https://boards.straightdope.com/u/filmore)\
**Post date:** [December 4, 2018, 8:42pm UTC](https://boards.straightdope.com/t/quora-hack/825561/3 "2018-12-04T20:42:10Z")

</div>

> [@ZipperJJ](#):
>
> - If you created a Quora account with your username as [you@gmail.com](mailto:you@gmail.com) and happened to use the password for Quora that you use to log in as [you@gmail.com](mailto:you@gmail.com) then YES you need to change your Gmail password ASAP. And don’t ever do that again (use the same password for multiple sites). You’ll also need to update your Quora password (to something different from your new Gmail password!)

And also change all the other sites which use that same password. Hackers will often use the same login/email/pw combination to try to log into other sites which accept email addresses as a login. So not only gmail, but your passwords for your bank, credit card, etc. should also be changed if they are the same password.

---

<div class="post-metadata">

**Author:** ![Mangetout](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/mangetout/32/19_2.png) [@Mangetout](https://boards.straightdope.com/u/Mangetout)\
**Post date:** [December 5, 2018, 8:14am UTC](https://boards.straightdope.com/t/quora-hack/825561/4 "2018-12-05T08:14:17Z")

</div>

> [@ZipperJJ](#):
>
> - If you created a Quora account with [you@gmail.com](mailto:you@gmail.com) as your username and some different password from your [you@gmail.com](mailto:you@gmail.com) Gmail login, your Gmail account is fine. Update your Quora password.

NB: in this scenario, some new spammers probably have your email address - and given that they have a password you might remember, but not remember where you used it, you might get email scam messages along [these](http://uk.businessinsider.com/new-email-scam-uses-old-password-fake-porn-threats-webcam-video-bitcoin-2018-7) lines. Safe to ignore them.

---

<div class="post-metadata">

**Author:** ![dougrb](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@dougrb](https://boards.straightdope.com/u/dougrb)\
**Post date:** [December 5, 2018, 4:21pm UTC](https://boards.straightdope.com/t/quora-hack/825561/5 "2018-12-05T16:21:35Z")

</div>

This was discussed on yesterdays Security Now podcast (starting at 49m35s). The passwords were encrypted.

[![](https://img.youtube.com/vi/Sa24G2UkSM4/maxresdefault.jpg "GPU RAM Image Leakage - Security Now 692") ](https://www.youtube.com/watch?v=Sa24G2UkSM4)
