Thursday, March 27, 2025
HomeCyber Security NewsMassive Collection of 2.2 Billion Usernames and Passwords Circulated in Hacker Forums

Massive Collection of 2.2 Billion Usernames and Passwords Circulated in Hacker Forums

Published on

SIEM as a Service

Follow Us on Google News

A new collection of massive breached database freely distributed on hacker forums and torrents. The breached database contains a collection of 2.2 billion unique usernames and it’s passwords.

The database named Collections #2 to #5 contains 845GB of stolen data and contains 25 billion records in total.

The massive collection of the breached database was identified by security researcher Chris Rouland from torrented files. He said WIRED that the collection has already circulated widely among the underground hacker forums.

Rouland could see that the database has been downloaded for more than 1,000 times and seeded by more than 130 people.

Before two weeks a massive collection “Collection#1” found by security researcher Troy Hunt from MEGA cloud storage. The collection contains 773 million records and have merely 87GB of data.

According to WIRED, who analyzed the sample of the leaked data, the credentials appear to be valid and they from years-old leaks.

This Massive Data collection leads to the expose of email addresses and passwords which has been harvested from various other sources of different breaches of different timeframes were kept in a folder.

For those who concern that your accounts may have been compromised can use Have I Been Pwned to check that that your account information present in “Collection#1”, for Collections #2 to #5 you can check Hasso Plattner Institute tool.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

CodeQLEAKED: GitHub Supply Chain Attack Enables Code Execution via CodeQL Repositories

A recent discovery has revealed a potential supply chain attack vulnerability in GitHub's CodeQL...

Exim Use-After-Free Vulnerability Enables Privilege Escalation

A significant security threat has been uncovered in Exim, a popular open-source mail transfer...

OpenAI Offers Up to $100,000 for Critical Infrastructure Vulnerability Reports

OpenAI has announced major updates to its cybersecurity initiatives. The company is expanding its...

Splunk RCE Vulnerability Enables Remote Code Execution via File Upload

A severe vulnerability in Splunk Enterprise and Splunk Cloud Platform has been identified, allowing...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

CodeQLEAKED: GitHub Supply Chain Attack Enables Code Execution via CodeQL Repositories

A recent discovery has revealed a potential supply chain attack vulnerability in GitHub's CodeQL...

Exim Use-After-Free Vulnerability Enables Privilege Escalation

A significant security threat has been uncovered in Exim, a popular open-source mail transfer...

OpenAI Offers Up to $100,000 for Critical Infrastructure Vulnerability Reports

OpenAI has announced major updates to its cybersecurity initiatives. The company is expanding its...