pwned.
According to Wired, the largest record dump in history has been released by an anonymous party. Consisting of 2.7 billion records, of which 773 million are unique, the dump also contains 140 million emails and 10 million passwords that have never been seen on Troy Hunt’s Have I Been Pwned site.
In January 2019, a large collection of credential stuffing lists (combinations of email addresses and passwords used to hijack accounts on other services) was discovered being distributed on a popular hacking forum. The data contained almost 2.7 billion records including 773 million unique email addresses alongside passwords those addresses had used on other breached services.
The data was originally hosted on MEGA, but was most recently on “a popular hacking forum”. Mostly, this kind of data was obtained by cracking a ton of online services and using a password guesser. It’s the sort of database “credential stuffers” love; toss in a working login on a site they want to attack, and they’re in. The file of the dump contains around 12,000 files and totals up to 87GB; a smörgåsbord for the sort that use this data for less than nice purposes.
Hunt has already incorporated this data into the Have I Been Pwned database. You might want to give the site a spin, just to see if you were among those breached.
Source: BoingBoing
About Author
