[hacxx]

True. If you use the credentials on other sites with less security or that do not notify the user then you can authenticate, the problem is getting access to the emails inbox. In case of Gmail a alert is immediately generated.

I have seen and access hundreds of compromised Mega.nz accounts. The problem is what the owner of that account considers as gold in the outside eyes is garbage. Sure you can access some compromising photos or official documents but why will i collect them. At the end, i just notify them that there account is compromised and should change the password.

In one insulated case the owner though that i was going to blackmail him because of the photos. First he asked for the password to be sure if i was not lying than after i send the password he emailed me back saying "Men you got skills. That was the password for my email a few months ago".