How to Stop Scammers Ripping Usernames & Passwords & Sharing

[mjwalshe]

I just noticed that for on particular customer some slimy individual has posted multiple login and username /pw for the sites thus alowing people to by pass the registration.

any one else delt with issues like this of course they are hiding there whois detail's

[edited by: engine at 2:23 pm (utc) on Nov. 1, 2007]
[edit reason] specifics removed [/edit]

[rocknbil]

Welcome aboard mjwalshe, the first question you should ask is how they got these user id's and passwords in the first place.

Once that hole is closed, do some batch to change them all and notify the customers you had to change their passwords. I would advise against emailing the login info, but provide a script that will retrieve the password for them based on email address and other identifying factors, such as registered name.