Patent ID: 9077747
Filing Date: 2015-07-07
Classification: H04L

Abstract:
1. A computer-implemented method for responding to security breaches, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: receiving, via a security server, a notification that a website that provides network-based services has experienced a security breach; identifying, via the security server, a first user account that is potentially affected by the security breach by: identifying an account-access credential used to access the first user account, wherein the account-access credential used to access the first user account was potentially exposed during the security breach; identifying, via the security server, a second user account that is potentially at risk as a result of the potential exposure of the account-access credential used to access the first user account by: performing, via the security server, for the first user account that is potentially affected by the security breach, a security action that addresses the security breach; performing, via the security server, for the second user account, an additional security action that addresses the security breach in response to determining that the second user account is potentially at risk.