Part of password comprimised?

DemonoidSC

Hi,

I noticed an email in my spam folder today that was a scam we've all heard about before. Scammer claims to have taken all my email and facebook contacts, and then hacked my web cam to record me 'enjoying' porn sites. Send money or all your contacts will be sent a video....Pure scam I know (I don't have a web cam, only have a desktop computer, I don't have a facebook account either) but what caught my eye was they had part of one of my commonly used passwords. It's a password I use for mostly throw-away stuff.

So, for example, lets say my password is 'NinjaDragon55', the email said, we know your password is 'ninja'. I have never, to my knowledge, used only the first word in a password, and they got the capitalization wrong. But it still caught my eye. I guess some site I signed up to has been compromised but it is really weird that is only part of the password.

Any thoughts?

Blowfish

This site will list what (public at least) breaches your email has been involved in and what details were compromised: https://haveibeenpwned.com/

It's more than likely the password given was involved in one of these.

Wheety

I wouldn't worry about their threats but I would change my passwords. I use LastPass so have a different password for each site.

Maybe do a Malwarebytes scan of your pc too, before changing your passwords.