DATA Leak

[Petak73]

I have received a notification by Google that my OSM credentials have leaked from Organic Maps. Any comments on this?

[biodranik]

Would you please provide more details about the notification and the version of Organic Maps that you're using? And from which store did you install Organic Maps?

[Petak73]

As I wrote, I have received a notification from Google - obviously I have downloaded Organic Maps from Google Play Store.

[biodranik]

Thanks!

• It means that your password is already known in some public database of leaked passwords
• It doesn't mean that Organic Maps leaked it (it is impossible, your password is not stored in Organic Maps for Google Play, you type it in the OpenStreetMap.org website to login)
• If you have used the same password somewhere else, then it could be leaked from somewhere else.
• You need to change your OpenStreetMap.org password (and re-login in Organic Maps)

[Petak73]

Incorrect!

• it is not the password for my GOOGLE account that is leaked - as I wrote, it is the password for my OSM profile that is leaked.
• my OSM credentials are stored in Organic Maps - it is literally the first line in the Settings menu in OM.
• I have not used my OSM credentials in any other app on the phone associated with this particular google profile.
• Yes, I know I now have to change my OSM password but I very much doubt that I will ever use it again through Organic Maps, given your response to this issue.

[tooclassyforthisworld]

You're being ridiculous.

Google's alert says your password was compromised. The mental hoops you went through to claim this app actively leaked your data when you know nothing about its technical implementation are disingenous and frankly disrespecful to the volunteers that contribute to it.

OpenStreetMap has been scraped for passwords numerous times by malicious actors in the past, as is the case for many online services. Learn how Have I Been Pwned works.