Wednesday, May 14, 2025
HomeCyber Security NewsMassive Collection of 2.2 Billion Usernames and Passwords Circulated in Hacker Forums

Massive Collection of 2.2 Billion Usernames and Passwords Circulated in Hacker Forums

Published on

SIEM as a Service

Follow Us on Google News

A new collection of massive breached database freely distributed on hacker forums and torrents. The breached database contains a collection of 2.2 billion unique usernames and it’s passwords.

The database named Collections #2 to #5 contains 845GB of stolen data and contains 25 billion records in total.

The massive collection of the breached database was identified by security researcher Chris Rouland from torrented files. He said WIRED that the collection has already circulated widely among the underground hacker forums.

- Advertisement - Google News

Rouland could see that the database has been downloaded for more than 1,000 times and seeded by more than 130 people.

Before two weeks a massive collection “Collection#1” found by security researcher Troy Hunt from MEGA cloud storage. The collection contains 773 million records and have merely 87GB of data.

According to WIRED, who analyzed the sample of the leaked data, the credentials appear to be valid and they from years-old leaks.

This Massive Data collection leads to the expose of email addresses and passwords which has been harvested from various other sources of different breaches of different timeframes were kept in a folder.

For those who concern that your accounts may have been compromised can use Have I Been Pwned to check that that your account information present in “Collection#1”, for Collections #2 to #5 you can check Hasso Plattner Institute tool.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Windows Ancillary for WinSock 0-Day Vulnerability Actively Exploited to Gain Admin Access

Microsoft has confirmed active exploitation of a critical privilege escalation vulnerability in the Windows...

Earth Ammit Hackers Deploy New Tools to Target Military Drones

The threat actor group known as Earth Ammit, believed to be associated with Chinese-speaking...

New Microsoft Scripting Engine Vulnerability Exposes Systems to Remote Code Attacks

Critical zero-day vulnerability in Microsoft’s Scripting Engine (CVE-2025-30397) has been confirmed to enable remote...

Critical Microsoft Office Vulnerabilities Enable Malicious Code Execution

Microsoft has addressed three critical security flaws in its Office suite, including two vulnerabilities...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Windows Ancillary for WinSock 0-Day Vulnerability Actively Exploited to Gain Admin Access

Microsoft has confirmed active exploitation of a critical privilege escalation vulnerability in the Windows...

Earth Ammit Hackers Deploy New Tools to Target Military Drones

The threat actor group known as Earth Ammit, believed to be associated with Chinese-speaking...

New Microsoft Scripting Engine Vulnerability Exposes Systems to Remote Code Attacks

Critical zero-day vulnerability in Microsoft’s Scripting Engine (CVE-2025-30397) has been confirmed to enable remote...