Weak passwords aren't today's problem, they are tomorrow's...

tl;dr: Some old account of Jane's has been hacked; please point it out if you notice anything amiss.

Just got something new: what I can only describe as Blackmail Spam. On the one hand, while the email is desperately trying to look highly customized and threatening, it contains enough nonsense to give away that it's generic spam. (It claims that they recently got this information from a keylogger installed on a porn site, that they hacked our camera and are going to put the images from it online. Yeah, right.)

OTOH, the proof being used in the message looks real -- it includes a password that Jane used to use for unimportant accounts, combined with a plausible login for her. As usual for such things, they are demanding thousands of dollars of blackmail to be paid in bitcoin, blah blah blah.

So something has been hacked -- her credentials were almost certainly stolen from some site she used to use that had poor password security. No idea what, and I'm not desperately worried -- it doesn't appear to be anything I have in my records, and it isn't a login she used for anything important that I'm aware of. But if you see anything strange claiming to come from her, it's probably related, and would be useful for me to know about...