In all, out of about 2.2 million people that use HIPB’s notification service, 768,000 of them are implicated in this data dump. This list includes a few previous breaches that Hunt recognized, but also others that are new. “The post on the forum referenced ‘a collection of 2000+ dehashed databases and combos stored by topic’ and provided a directory listing of 2,890 of the files,” Hunt said. Thousands of BreachesĪs for the sources of the data, there are literally thousands of compromises at the root of the database. Vickery shares how companies can identify their own insecure data, remediate against a data breach and offers tips on protecting data against future attacks. Interested in learning more about data breach trends? Watch the free, on-demand Threatpost webinar, as editor Tom Spring examines the data breach epidemic with the help of noted breach hunter and cybersecurity expert Chris Vickery. There are also 21 million unique passwords in the database: “As with the email addresses, this was after implementing a bunch of rules to do as much clean-up as I could including stripping out passwords that were still in hashed form, ignoring strings that contained control characters and those that were obviously fragments of SQL statements,” Hunt said in a posting on Thursday. And after deduping and cleaning up the database, Hunt was left with about 773 million unique email addresses – the single largest collection of breached emails ever to be loaded into his compromised-credentials look-up service, Have I Been Pwned (HIBP). In examining the data, Hunt found that there are 1.16 billion unique combinations of email addresses and passwords listed. Soon after that, the whole shebang turned up on the cyber-underground. The data was organized into 12,000 separate files under a root folder called “Collection #1,” which gives the trove its name. Troy Hunt was first alerted to the cache, which totals 87GB of data, after it was seen being hosted on the MEGA cloud service (it has since been removed).

A database of breached emails totaling 773 million unique addresses has turned up on a popular underground hacking forum, giving cybercriminals one of the largest jackpots ever seen when it comes to account-compromise efforts.

Massive list of tor websites