Possible Stolen Password

[Chris3]

Hi

I know this isn't strictly meraki but we have one so I thought I'd post.

We had a instgram username and password go awol today.

We have a m64 with security so I think Im reasonably save ( no intrusions detected).

When we get the account back I know I should go an change the password everywhere else that combination was used.

We got a new employee recently that is actually helping with socials so is there any way to correctly secure that device. I hope she hasn't taken a picture or something like that with her phone etc.

Any thoughts?

P.S last time this happened a fair few years back the offending password for instagram came from the adobe database dump... 

Is anything like this happening at the moment?

Maybe you should change this to To the OFF THE STACK section. MOD.

[JohnT]

You can go to https://haveibeenpwned.com/ to see if your account has been compromised somewhere.

[BlakeRichardson]

@Chris3  If your company doesn't have a policy on dealing with cyber security breaches then this is something that should be looked into. 

Ideally you shouldn't (especially in business) be using the same password for more than one service and where possible use MFA. 

[PhilipDAth]

As @BlakeRichardson - use MFA everywhere.

And don't use TXT based authentication if you can avoid it - especially if you are in the USA where the Telco networks have poor security.

For the Meraki dashboard:

https://documentation.meraki.com/General_Administration/Other_Topics/Two-Factor_Authentication#Using... 

If you use Office 365, I would enable MFA in that, and then get everything using SAML against that to provide wide protection.