ProctorU data breach

[Merlin]

That article states the following: “If you have never had an account with ProctorU or first created an account with ProctorU after March 2015, this data breach does not affect you.”
Did you create an account with Proctor U before or after March 2015?

Yeah, this really only affects people who have had a ProctorU account for ≥ 5 years so most people on this forum are probably fine.

That said, it is never a bad idea to change your passwords after a data breach. This is particularly important if you use a common password on multiple sites (which is a terrible idea, just to be clear). Ideally, you should use different random passwords on each site stored in some kind of password manager, so if one gets compromised, it doesn't affect anything else.

If you were affected, as I was, you really just need to change your password on ProctorU and any other sites you may share that password with. My guess is that they hit ProctorU mainly to harvest passwords rather than to specifically gain access to ProctorU accounts. There isn't a whole lot a bad actor can do with old ProctorU accounts since I imagine that most of the people with accounts that old probably don't use them anymore.