Gmail/Spotify/Netflix hijacked after logging in on Windows computer

[smithjuliap]

Hi,

I've had security issues with various accounts - my Gmail, my Spotify and my Netflix account. In all cases, someone(s) appeared to suddenly have my login information for these accounts. First it was my Gmail (they were unable to access due to 2 factor authentication, but they had the correct login info), then my Netflix (they logged in and then changed my password, kicking me out) and now it's my Spotify (someone is on it and using it - I changed my password and logged out of all devices but they seem to still have access).

The only unusual vulnerability I can think of (as in, something I've done involving 1 or more of these accounts that's unusual) is that I logged onto both my Gmail and my Spotify on my work computer, which runs Windows 7, in the week prior to both issues occurring. Otherwise, I exclusively access these accounts from my iPhone and MacBook Air, and have never had prior problems. The Gmail problems started almost immediately after I logged onto my Gmail from my work computer for the first time. I never logged into Netflix from my work computer (Windows 7 Professional, 64-bit) but unfortunately, I used the same password or variations of the same password for multiple sites/accounts, including Netflix and Spotify. I changed most of them after the Gmail/Netflix debacle, but I never changed Spotify (until earlier today).

I'm just wondering if anyone knows what could be causing these problems, and if it could have something to do with my work computer. Work computer is very old. I work for a very small nonprofit that has no form of consistent IT support or security protocols (there's a volunteer that comes in once in awhile to do the most basic stuff, as none of us have any tech expertise whatsoever) and I highly doubt security/software updates etc. are ever done. I am extremely unknowledgeable about technology and computers, so this could be a stupid question, but the timing of these problems seems strange to me.

 

[wither 2]

I don't know how to fix the issue but why don't you update the work computer yourself? I assume it's connected to the internet.

 

[samuria]

You can use Firefox to see if any account you use has been hacked. It's possible if you login to a work PC then it records your password were any can come along and see it. Once you have one password you can often get others by going through forgot password on sites. What did you use on work PC ie or Firefox? It's worth doing a virus scan on it in case there is a key logger on it

 

[file3456]

Your first mistake was using the same password for all accounts. Never EVER do that! Use a password manager like keepass and backup its database to as much media as you have. Especially when you add or remove entries. For iPhone check out this: KeePassium - KeePass app for iOS | KeePassium

Two factor everything you can and try not to use SMS 2FA if at all possible. There are many, many hack vectors that can grab your password. How it was done is anybodies guess.