Overview
Information leak: the publication (or trusted announcement of possession) of stolen or otherwise acquired digital information like user profiles, credentials or other digital assets.
Information leaks have happened many times in the recent past. Sometimes, the number of affected people is quite small like in the leak of a customer database of a small web shop, where we probably would try to contact the few affected individuals or their employer’s IT department. But most of the time we face leaks that contain several million people’s private information.
From our experience as a CERT, it is difficult to inform individuals about the actual leak that happened. Too high is the suspicion the actual warning could be a phishing, and hence it is ignored. Testing services (“Is my email part of the leak”) have legal implications and are also problematic from a security perspective.
This document is a new approach to deal with the mass of information leaks. It is our intention to demonstrate the associated risks and suggest appropriate reactions of users of the service that leaked the information by listing the service of an information leak and showing the number of affected users in Luxembourg - as far as we know them.
TR-46 is an always-updated document. All new information leaks are mentioned here, for the case that we either had looked at it ourselves or can trust a source asserting to have access to such a leak.
How do I know if a service was affected?
All the services we know or trustfully believe that have been breached or otherwise lost your personal information are listed in this document. If you are a user of the service, consider yourself in need for action.
Is CIRCL also informing me directly / my ISP / my company?
If the password is in clear, we also try to notify you, respectively through your ISP or company IT security department, in addition to the listing in this document. The notification can be a difficult process especially to avoid that our own notification messages are abused in phishing tactics.
Vendor reactions
Vendors or service owners respond differently to such an embarrassing situation, and sometimes they are not mature enough to handle the situation properly or even in appropriate reaction time. You will experience that the vendor says that the passwords were stored hashed or encrypted, and that the leak is nothing to be worried about, because no one can do anything with the information. We generally object to this evaluation and show common risks hereafter.
What are the risks of my information being stolen?
- Spam containing malware or phishing to the email address from the leak. Since the people in the leak belong to a ‘common interest group’, a suitable topic can be found easily. There is no password of the account needed for this attack.
- Passwords are sometimes stored in clear or can be decrypted or looked up in hash tables, depending on the implementation. Such acquired passwords can be used to log in into the account where it has been stolen from or in associated accounts where the same combination of username and password is used.
- When attackers have access to the service, they might place orders in your name (online shops, online services).
- Depending on the information the attacker could have had access to (e.g. Mailbox), it is possible that he uses documents (e.g. invoices) to craft legitimate-looking malicious documents and sends it to contacts he could extract, too.
- If credit card data was accessible, it can be used to do purchases on the internet
What should I do if the service I’m using was affected?
To secure access to your account, first change the password you used for this service as soon as possible. Change it also for every other account where the password was re-used.
The next steps are depending on the information contained in the leak: If the Credit Card information is within the leak, contact your issuer to have the card blocked.
In general, if the information leak contained an email address, be very cautious with incoming emails as they could be containing malicious software or phishing documents .
What can I do to prevent collateral damage?
- Use individual passwords for each service (never re-use passwords)
- Enable 2-factor authentication wherever possible
- Select services that just collect a minimum of information from the users
- Select service providers that know how to deal with security incidents and who are transparent and proactive
Reference of leaks
| Reference | Date of Detection | Source of Leak name | confirmed | # of affected in constituency of CIRCL | # total | data fields |
|---|---|---|---|---|---|---|
| 5019 5444 | 2011-12-24 | Stratfor Leak | y | 110 | 860160 | email address, password hashed |
| 156622 | 2015-05-26 | MSpy Accounts | n | 6 | 7128 | email address, password clear |
| 300239 | 2016-08-30 | Vibram | y | 1 | 1412 | id_utente,username,password,nome,cognome,azienda, indirizzo_azienda,numero_azienda,cap_azienda,citta_azienda, stato,ruolo,altro_ruolo,tipologia_azienda, tipologia_azienda_altro,settore_azienda,settore_azienda_altro, telefono,nazione,newsletter,data_iscrizione,data_attivazione, status,codice_attivazione,lingua_preferita,accessi, ultimo_accesso |
| 301885 | 2016-09-04 | unknown | y | 12 | 9999 | email address,password clear |
| 301989 | 2016-09-04 | LinkedIn related | y | 56 | 11029 | email address,password clear |
| 304377 | 2016-09-11 | unknown | y | 1 | 443 | nr.,email address,password clear |
| 304684 | 2016-09-12 | unknown | y | 1 | 2061 | registered,email address,password clear |
| 305223 | 2016-09-13 | LinkedIn related | y | 6 | 10000 | email address, password clear |
| 305756 | 2016-09-14 | unknown | y | 1 | 7467 | email address, password clear |
| 308417 | 2016-09-19 | zain.com | y | 4 | 1846 | id,company_id,type,email,phone,status,deleted, streams,password,last_name,first_name,position,create_date, prime_stream,access_right,modified_date, core_bussiness,secondary_stream,attendConference |
| 314535 | 2016-10-01 | streamtunes.tv | y | 1 | 1842 | email address, password clear |
| 315043 | 2016-10-03 | Eurekalert | y | 15 | 10209 | email address, password encrypted |
| 316607 | 2016-10-05 | Dropbox (2012 Leak) | y | 13458 | 68680742 | email/login, password hashed |
| 317627 | 2016-10-07 | unknown | y | 6 | 7256 | email address, password clear |
| 318866 | 2016-10-10 | unknown | y | 1 | 192 | email address, password clear |
| 318901 | 2016-10-11 | linhofstudio.com | y | 1 | 243 | email address, password clear |
| 321684 | 2016-10-19 | Brazil, radiestesi related | y | 43 | 13981 | email address, password clear |
| 321692 | 2016-10-19 | unknown | y | 1 | 5087 | OrderInfo,itemType,transactionDate,simType,productCode, tariffCode,variationCode,firstName,lastName,dateOfBirth, email,telephoneNumber,county,postcode,isoCountryCode, streetName,accountHolderName,bankAccountNumber,bankCode |
| 322102 | 2016-10-20 | Malware related | y | 4 | 1421 | email address, password clear |
| 324271 | 2016-10-27 | Malware related | y | 13 | 3731 | email address, password clear |
| 324449 | 2016-10-28 | Malware related | y | 12 | 6823 | email address, password clear |
| 325591 | 2016-10-29 | unknown | y | 3 | 1603 | email address, password clear |
| 325789 | 2016-10-30 | .BR and quimica related | y | 1 | 970 | email address, password clear |
| 326555 | 2016-11-01 | Malware related | y | 1 | 3607 | email address, password clear |
| 327236 | 2016-11-02 | unknown | y | 3 | 1338 | email address, password hashed |
| 327269 | 2016-11-02 | handit related | y | 5 | 9083 | email address, password clear |
| 327996 | 2016-11-05 | unknown | y | 1 | 500 | email address, password clear |
| 328348 | 2016-11-06 | In relation with equitydevelopment.co.uk |
y | 11 | 12902 | email address, password clear |
| 328370 | 2016-11-06 | In relation with pegasomodels.com |
y | 4 | 3136 | email address, password clear |
| 328841 | 2016-11-08 | Schokolade related | y | 2 | 2000 | email address, password clear |
| 329994 | 2016-11-09 | unknown | y | 1 | 2106 | email address, password clear |
| 330355 | 2016-11-10 | apanews.net | y | 4 | 329 | id_abonne,nom_abonne,pays_abonne,pass_abonne, emai_abonne,status_abonne,pseudo_abonne,prenoms_abonne |
| 331438 | 2016-11-13 | unknown | y | 2 | 16735 | email address, password clear |
| 331470 | 2016-11-14 | planetdns.net | y | 5 | 1443 | email address, password clear |
| 332233 | 2016-11-15 | AdultFriendFinder leak May 2015 |
y | 38 | 4175514 | id,pwsid,pid,age,sex,domain,prderamount, first_order_amount,cobrand_id,show_lang, profile_type,handle,email |
| 332730 | 2016-11-18 | ThePirateGame.net | y | 2 | 3531 | id,ip,email,host,username,password,fullname |
| 333057 | 2016-11-19 | In relation with mestrado Brazil |
y | 1 | 3706 | email address, password clear |
| 333090 | 2016-11-19 | unknown | y | 1 | 72 | email address, password clear |
| 333233 | 2016-11-19 | kenya-safari.co.ke | y | 2 | 4551 | cln_id,zip,city,whois,state,email,office,status,mobile,website, address,website,address,country,lastname,is_admin, password,username,initials,telephone,othernames, subscribe_yn,created_date |
| 335169 | 2016-11-24 | unknown | y | 1 | 2068 | email address, password clear |
| 335186 | 2016-11-24 | 000webhost.com related | y | 1 | 4540 | email address, password clear |
| 335320 | 2016-11-25 | 000webhost.com related | y | 5 | 14676 | email address, password clear |
| 336975 | 2016-11-27 | unknown | n | 1 | 489 | email address, password hashed |
| 336993 | 2016-11-27 | www.pmpf.rs.gov.br | y | 0 | 2121 | email address, password hashed, additional personal data |
| 338045 | 2016-11-29 | unknown | y | 72 | 42135 | email address, password clear |
| 338904 | 2016-11-30 | unknown | y | 4 | 73 | USER ID, PASSWORD, PHONE NUMBER, RECOVERY/ALTERNATIVE EMAIL, LOCATION |
| 339220 | 2016-12-01 | In relation with cardio & fitness |
y | 31 | 10952 | email address, password clear |
| 341894 | 2016-12-04 | In relation with poster & posterfuchs |
y | 1 | 3211 | email address, password clear |
| 341994 | 2016-12-04 | www.golfersfriend.co.za | y | 6 | 9319 | username, email, password hashed, salt |
| 344326 | 2016-12-08 | unknown | y | 1 | 1258 | email address, password clear |
| 344816 | 2016-12-09 | unknown | y | 1 | 24 | email address, password clear |
| 346932 | 2016-12-13 | unknown | y | 1 | 87 | email address, password clear |
| 349931 | 2016-12-17 | In relation with tunesoman.com |
y | 1 | 7374 | email address, password clear |
| 350106 | 2016-12-18 | In relation with Motor, Car, Mini |
y | 2 | 5661 | email address, password clear |
| 350392 | 2016-12-19 | www.1394store.com | y | 21 | 1349 | email address, password clear |
| 352791 | 2016-12-23 | unknown | y | 2 | 1289 | email address, password clear |
| 352924 | 2016-12-24 | unknown | y | 6 | 3734 | email address, password hashed, password clear |
| 353000 | 2016-12-24 | seaoflifeshop.com | y | 13 | 2268 | email address, password clear |
| 353067 | 2016-12-25 | In relation with gabon, adjaho |
y | 1 | 1543 | email address, password clear |
| 353961 | 2016-12-28 | skillab.it | y | 1 | 1410 | user name, password hashed, email address |
| 354507 | 2016-12-30 | Mom-, Mommy- social community related |
y | 367 | 106187 | email address, password clear |
| 354802 | 2016-12-30 | www.shoesontheweb.com | y | 29 | 1863 | email address, password clear |
| 354821 | 2016-12-30 | unknown | y | 2 | 6910 | email address, password clear |
| 355785 | 2017-01-03 | www.deezer.com | y | 1 | 728 | email address, password clear |
| 355879 | 2017-01-03 | Minecraft related | y | 1 | 2812 | email address, password clear |
| 356313 | 2017-01-04 | Netflix related | y | 1 | 101 | email address, password clear |
| 357168 | 2017-01-07 | unknown | y | 1 | 1128 | email address, password clear |
| 357648 | 2017-01-09 | bunkerindex.com | n | 2 | 3985 | email address |
| 359040 | 2017-01-13 | pile44.com, piles44.com | y | 26 | 17472 | email address, password clear |
| 359306 | 2017-01-15 | ludygames.com | y | 3 | 2549 | id, nom, pass, mail, passmd5, description |
| 362846 | 2017-01-28 | unknown | y | 1 | 8534 | email address, password clear |
| 363173 | 2017-01-29 | unknown | y | 6 | 30213 | email address, password hashed |
| 363488 | 2017-01-31 | twinner.com.tw | y | 17 | 13122 | email address, password clear |
| 364775 | 2017-02-04 | www.1394store.com | y | 7 | 1102 | email address, password clear |
| 365343 | 2017-02-06 | www.aantv.com | y | 2 | 11389 | email address, password hashed |
| 366193 | 2017-02-09 | unknown | y | 1 | 4049 | email address, password hashed |
| 366831 | 2017-02-11 | unknown | y | 2 | 2727 | email address, password clear |
| 366834 | 2017-02-11 | www.stirling-modellbau.de | y | 3 | 445 | email address, password clear |
| 366988 | 2017-02-11 | In relation with chevaux, cheval, truand |
y | 4 | 5406 | email address, password clear |
| 367210 | 2017-02-12 | unknown | y | 2 | 1000 | email address, password clear |
| 367554 | 2017-02-14 | unknown | y | 2 | 7931 | email address, password clear |
| 367890 | 2017-02-15 | unknown | y | 23 | 11048 | email address, password clear |
| 368077 | 2017-02-15 | Netflix related | y | 1 | 1555 | email address, password clear, resolution |
| 368585 | 2017-02-17 | plasticker.de | y | 8 | 10349 | email address, password clear |
| 368690 | 2017-02-17 | unknown | y | 2 | 1008 | email address, password clear |
| 368729 | 2017-02-17 | Immobilier, France related | y | 4 | 8122 | email address, password clear |
| 368925 | 2017-02-18 | Stolen from malware | y | 3 | 405 | Website, Username, Password, Date |
| 373022 | 2017-03-04 | unknown | y | 1 | 167 | email address, password clear |
| 376065 | 2017-03-14 | Canadian .GOV site | y | 3 | 256 | email address, password clear |
| 376348 | 2017-03-15 | www.orepeditions.com | y | 6 | 844 | username, password clear, email address |
| 376993 | 2017-03-17 | Brazul related | y | 1 | 255 | username, password hashed, email address |
| 381195 | 2017-04-01 | French PayPal Accounts | y | 1 | 59 | email address, password clear, additional personal data |
| 381960 | 2017-04-03 | wireclass.com | y | 1 | 4242 | Price, Full Name, Email, Phone No password (clear), Status |
| 385576 | 2017-04-15 | unknown | y | 2 | 6030 | email address, password hashed |
| 385966 | 2017-04-16 | diabetenet.com.br | y | 2 | 11971 | email address, password clear |
| 386569 | 2017-04-18 | unknown | y | 1 | 5616 | email address, password hashed |
| 387040 | 2017-04-19 | unknown | y | 1 | 9468 | email address, password clear |
| 405769 | 2017-05-09 | kungfumagazine.com | y | 29 | 21555 | Username, PasswordHash, Salt, Email |
| 407838 | 2017-05-14 | unknown | y | 2 | 915 | email address, password clear |
| 408651 | 2017-05-15 | www.valsamon.com | y | 1 | 537 | id,idiotita,city,phone,email,foreas,date,active, time,country,company,zipcode,address,morfosi, username,password,timestamp |
| 409990 | 2017-05-18 | unknown | y | 1 | 195 | email address, password clear |
| 413411 | 2017-05-24 | unknown | y | 15 | 13212 | email address, password clear |
| 415679 | 2017-05-30 | Ster-Kinekor | n | - | 6700000 | account information |
| 415679 | 2017-05-30 | Bell Canada | n | - | 1900000 | account information |
| 415679 | 2017-05-30 | DaFont | n | - | 637000 | account information |
| 418637 | 2017-06-06 | SystemTools.com | y | 3 | 4055 | alias, email address, password hashed |
| 418678 | 2017-06-06 | unknown | y | 5 | 4035 | email address, password clear or phone number |
| 419003 | 2017-06-07 | US Shopping related | y | 1 | 803 | email address, password clear |
| 422881 | 2017-06-17 | unknown | y | 1 | 1719 | email address, password clear |
| 424274 | 2017-06-21 | friendsinrome related | y | 6 | 13951 | email address, password clear |
| 427447 | 2017-06-29 | wbdg.org | y | 0 | 3305 | email, password hashed |
| 427448 | 2017-06-29 | wbdg.org | y | 0 | 3428 | email, password hashed |
| 427716 | 2017-06-30 | lafermeschmitt.com | y | 1 | 429 | email, name, adress, phone |
| 428019 | 2017-07-01 | unknown | y | 1 | 126 | email address, password clear |
| 428580 | 2017-07-02 | unknown | y | 1 | 5957 | email address, password clear |
| 429401 | 2017-07-04 | Spotify | y | 1 | 582 | email address, password clear, subscription type |
| 431618 | 2017-07-09 | Gemstones-, Thai related | y | 1 | 14359 | email address, password clear |
| 432644 | 2017-07-12 | crunchyroll.com | y | 1 | 1000 | email address, password clear, subscription |
| 433350 | 2017-07-14 | unknown | y | 1 | 4243 | email address, password clear |
| 434526 | 2017-07-18 | www.maph.com.br | y | 1 | 9657 | email address, password hashed |
| 437166 | 2017-07-26 | unknown | y | 1 | 1758 | name, lastname, email, password, city |
| 437464 | 2017-07-27 | unknown | y | 1 | 59 | email address, password clear |
| 439000 | 2017-08-01 | Video related | y | 1 | 5270 | ID, First Name, Last Name, Email, Password (hashed) |
| 439080 | 2017-08-01 | magazineluiza.com.br | y | 1 | 640 | email address, password clear, country code, city |
| 439399 | 2017-08-02 | Instagram related | y | 1 | 1686 | email address, password clear |
| 440737 | 2017-08-06 | Netflix and/or Spotify | y | 1 | 2625 | email address, password clear, subscription |
| 441941 | 2017-08-10 | unknown | y | 3 | 6693 | email address, password clear |
| 441945 | 2017-08-10 | unknown | y | 2 | 13910 | email address, password clear |
| 443537 | 2017-08-15 | unknown | y | 1 | 341 | email address, password clear |
| 443755 | 2017-08-15 | unknown | y | 1 | 1000 | email address, password clear |
| 444213 | 2017-08-16 | Phishing | y | 3 | 521 | email address, password clear, IP address |
| 445702 | 2017-08-20 | unknown | y | 3 | 2752 | email address, password hashed |
| 446185 | 2017-08-22 | unknown | y | 1 | 9202 | email address, password clear |
| 446471 | 2017-08-23 | pointers.org.my | y | 1 | 4776 | email address, password hashed |
| 447093 | 2017-08-24 | Minecraft related | y | 1 | 6392 | email address, password clear |
| 447655 | 2017-08-26 | unknown | y | 9 | 3217 | email address, password hashed |
| 448266 | 2017-08-28 | unknown | y | 12 | 13931 | email address, password clear |
| 448939 | 2017-08-31 | DustGame related | y | 1 | 356 | id,last,first,email,username,password clear |
| 448946 | 2017-08-31 | pokersuchmaschine.de | y | 1 | 857 | ID,name,email,password hashed |
| 448948 | 2017-08-31 | www.cambridgescp.com | y | 2 | 1508 | email address, password clear |
| 450446 | 2017-09-05 | www.hyena.it | y | 5 | 9117 | email address, password clear |
| 451564 | 2017-09-08 | unknown | y | 1 | 1506 | email address, password clear |
| 452372 | 2017-09-10 | Spotify | y | 1 | 162 | email address, password clear |
| 456275 | 2017-09-20 | abyssplongee.be | y | 2 | 257 | email address, password hashed |
| 457770 | 2017-09-25 | unknown | y | 1 | 4376 | email address, password clear |
| 457801 | 2017-09-25 | unknown | y | 1 | 3262 | email address, password clear |
| 459995 | 2017-09-29 | rpgland.org | y | 1 | 5667 | nickname, email address, password hashed |
| 460363 | 2017-09-30 | Brazilian drogaria related | y | 1 | 5421 | email address, password clear |
| 460678 | 2017-10-02 | Computer gaming related | y | 1 | 3975 | email address, password clear |
| 463458 | 2017-10-08 | unknown | y | 1 | 4371 | email address, password clear |
| 463910 | 2017-10-10 | unknown | y | 1 | 2197 | email address, password clear |
| 464150 | 2017-10-10 | unknown | y | 1 | 63614 | email address, password clear |
| 464772 | 2017-10-12 | Spotify accounts | y | 1 | 1235 | email address, password clear, subscription |
| 465165 | 2017-10-13 | Online Account | y | 1 | 11516 | email address, password clear |
| 465446 | 2017-10-14 | unknown | y | 1 | 409 | email address, password clear |
| 466468 | 2017-10-17 | unknown | y | 2 | 11499 | email address, password clear |
| 466469 | 2017-10-17 | unknown | y | 1 | 5310 | email address, password clear |
| 466561 | 2017-10-17 | unknown | y | 3 | 13277 | email address, password clear |
| 466562 | 2017-10-17 | unknown | y | 3 | 14702 | email address, password clear |
| 466564 | 2017-10-17 | unknown | y | 2 | 15506 | email address, password clear |
| 466568 | 2017-10-17 | unknown | y | 4 | 15303 | email address, password clear |
| 466573 | 2017-10-17 | unknown | y | 2 | 15115 | email address, password clear |
| 466579 | 2017-10-17 | unknown | y | 1 | 8431 | email address, password clear |
| 466580 | 2017-10-17 | unknown | y | 3 | 13960 | email address, password clear |
| 466605 | 2017-10-18 | Switzerland, DVD shop | y | 1 | 995 | email address, password clear |
| 467602 | 2017-10-20 | unknown | y | 1 | 443 | email address, password clear |
| 467899 | 2017-10-21 | balladen.de | y | 1 | 1964 | memberID,info,email,passwort,sumLogin,nickname, lastLogin,anmeldedatum,onlineStatus, aktivierungscode,nutzungsbedaktzeptiert, datum_datenschutzaktzeptiert, datum_nutzungsbedaktzeptiert, datenschutzhinweisaktzeptiert |
| 468497 | 2017-10-23 | unknown | y | 1 | 10346 | email address, password clear |
| 471014 | 2017-10-30 | unknown | y | 1 | 3284 | email address, password clear |
| 471655 | 2017-11-01 | unknown | y | 2 | 40594 | email address, password clear |
| 471658 | 2017-11-01 | www.oriwiki.com | y | 0 | 4129 | email address, password clear |
| 472774 | 2017-11-05 | most likely skiffy.com | y | 1 | 9995 | email address, password clear |
| 475019 | 2017-11-11 | belezanaweb.com.br | y | 2 | 11945 | email address, password clear |
| 475198 | 2017-11-11 | belezanaweb.com.br | y | 1 | 8796 | email address, password clear |
| 477976 | 2017-11-20 | SAAB Defense - South Africa related | y | 1 | 850 | email address, password clear |
| 478233 | 2017-11-21 | kovmat.sav.sk | y | 1 | 5500 | email address, password clear |
| 479219 | 2017-11-24 | unknown | y | 1 | 77 | email address, password clear |
| 481391 | 2017-11-30 | pbghpa.com | n | 1 | 277 | UserAccessLevel, UserActive, UserPasswordChange, UserPassword, UserTelephone, UserEmail, UserCompany, UserLastName, UserMiddleName, UserFirstName, UserID |
| 481438 | 2017-11-30 | unknown | y | 1 | 12093 | email address, password clear |
| 481471 | 2017-11-30 | www.lehautdupanier.fr | y | 1 | 3008 | email address, password hashed |
| 482007 | 2017-12-02 | unknown | y | 2 | 457 | email address, password clear |
| 483218 | 2017-12-05 | vet related | y | 2 | 2176 | email address, password hashed |
| 483549 | 2017-12-06 | in relation with fitness, tennis, basket | y | 1 | 185 | email address, password clear |
| 483947 | 2017-12-06 | gaming/steam related | y | 1 | 1580 | email address, password clear |
| 484603 | 2017-12-08 | unknown | y | 1 | 4998 | email address, password clear, subscription type |
| 485111 | 2017-12-10 | unknown | y | 3 | 130266 | email address, password clear |
| 485199 | 2017-12-10 | unknown | y | 1 | 2967 | email address, password clear, subscription type, country |
| 485288 | 2017-12-10 | unknown | y | 3 | 2505 | email address, password clear |
| 486834 | 2017-12-15 | denicomp.com | y | 1 | 653 | order information incl.: email address, password hashed |
| 487262 | 2017-12-16 | unknown | y | 1 | 3209 | email address, password hashed |
| 487415 | 2017-12-17 | ontcm.com | y | 1 | 4391 | email address, username, password hashed |
| 501240 | 2018-01-07 | gaming related | y | 3 | 2010 | email address, password clear, gaming details |
| 501323 | 2018-01-07 | unknown | y | 1 | 9832 | email address, password clear |
| 501390 | 2018-01-07 | gaming related | y | 2 | 5095 | email address, password clear |
| 501867 | 2018-01-09 | unknown | y | 1 | 13566 | email address, password clear |
| 502466 | 2018-01-10 | Spotify related | y | 1 | 200 | email address, password clear |
| 502856 | 2018-01-11 | agilebook.com.br | y | 2 | 19579 | email address, password hashed |
| 504208 | 2018-01-14 | Hungary, kamat, kalkulator | y | 78 | 6837 | email address, password clear |
| 505272 | 2018-01-17 | quintessence-international.fr | y | 20 | 5781 | email address, password clear |
| 505838 | 2018-01-18 | unknown | y | 1 | 19162 | email address, password clear |
| 506481 | 2018-01-20 | unknown | y | 3 | 10000 | email address, password clear |
| 506568 | 2018-01-20 | unknown | y | 1 | 7506 | email address, password clear |
| 507063 | 2018-01-21 | Spotify accounts | y | 1 | 649 | email address, password clear, subscription |
| 507201 | 2018-01-22 | fotoxisto.aldeiasdoxisto.pt | y | 1 | 1437 | email address, password clear, user |
| 508301 | 2018-01-24 | scam/phishing campaign | y | 4 | 104 | email address, password clear, personal data |
| 508986 | 2018-01-25 | unknown | y | 1 | 1882 | email address, password clear |
| 510378 | 2018-01-29 | Various sites | y | 1 | 10000 | email address, password clear |
| 510497 | 2018-01-29 | Spotify accounts | y | 1 | 213 | email address, password clear |
| 511405 | 2018-01-31 | Minecraft accounts | y | 1 | 6452 | email address, password clear |
| 512079 | 2018-02-02 | wilsoncheerleading.de | y | 1 | 1385 | email address, password clear |
| 512631 | 2018-02-03 | unknown | y | 1 | 7830 | email address, password clear |
| 512873 | 2018-02-04 | sonnenschutzshop24.de | y | 9 | 9536 | email address, password clear |
| 513028 | 2018-02-04 | hygiene-nasale.fr | y | 1 | 3997 | email address, password clear |
| 513274 | 2018-02-04 | unknown | y | 1 | 1845 | email address, password clear |
| 513907 | 2018-02-06 | unknown | y | 2 | 835 | email address, password clear |
| 515578 | 2018-02-10 | artworkshop.co.uk | y | 2 | 6026 | email address, password clear |
| 516028 | 2018-02-11 | unknown | y | 2 | 9106 | email address, password clear |
| 518581 | 2018-02-17 | unknown | y | 3 | 2787 | email address, password clear |
| 518584 | 2018-02-18 | unknown | y | 3 | 2663 | email address, password clear |
| 519442 | 2018-02-19 | unknown | y | 1 | 6452 | email address, password clear |
| 519454 | 2018-02-19 | Mageia.Org | y | 1 | 2600 | email address, password hashed |
| 519455 | 2018-02-19 | Mageia.Org | y | 2 | 2600 | email address, password hashed |
| 519612 | 2018-02-20 | unknown | y | 7 | 15360 | email address, password clear |
| 520061 | 2018-02-21 | unknown | y | 1 | 4306 | email address, password clear |
| 520973 | 2018-02-23 | unknown | y | 1 | 647 | email address, password clear |
| 522432 | 2018-02-26 | apresmidishopping.com | y | 6 | 6560 | email address, password clear |
| 522697 | 2018-02-27 | unknown | y | 3 | 2253 | email address, password clear |
| 524450 | 2018-03-04 | apimiel.fr | y | 2 | 5000 | email address, password clear |
| 524523 | 2018-03-04 | unknown | y | 1 | 3468 | email address, password clear |
| 524890 | 2018-03-05 | unknown | y | 3 | 558 | email address, password clear |
| 526794 | 2018-03-10 | unknown | y | 1 | 12126 | email address, password clear |
| 526894 | 2018-03-11 | unknown | y | 1 | 881 | email address, password clear |
| 527733 | 2018-03-13 | Netflix or Spotify | y | 1 | 124 | email address, password clear, subscription, renew date, country |
| 527826 | 2018-03-13 | Instagram accounts | y | 2 | 4183 | email address, password clear |
| 528117 | 2018-03-14 | cutkeysdirect.co.uk | y | 5 | 13335 | email address, password clear |
| 528480 | 2018-03-15 | Abeilles, Miel (Bees, Honey) | y | 3 | 7000 | email address, password clear |
| 529421 | 2018-03-18 | unknown | y | 1 | 1918 | email address, password clear |
| 529434 | 2018-03-18 | unknown | y | 1 | 11196 | email address, password clear |
| 531638 | 2018-03-24 | unknown | y | 1 | 5881 | email address, password clear |
| 531751 | 2018-03-24 | unknown | y | 1 | 12055 | email address, password clear |
| 533118 | 2018-03-28 | unknown | y | 1 | 11341 | email address, password clear |
| 533531 | 2018-03-29 | unknown | y | 1 | 2364 | email address, password clear |
| 533908 | 2018-03-29 | gaming related | y | 1 | 85 | email address, password clear, gaming details |
| 533999 | 2018-03-30 | flaner-en-provence.fr | y | 10 | 713 | address, email address, password clear, tel |
| 534716 | 2018-04-01 | unknown | y | 9 | 123000 | email address, password clear |
| 534738 | 2018-04-01 | unknown | y | 2 | 58720 | email address, password clear |
| 535097 | 2018-04-02 | gaming related | y | 1 | 7290 | email address, password clear |
| 536601 | 2018-04-06 | unknown | y | 3 | 32490 | email address, password clear |
| 537783 | 2018-04-09 | online accounts | y | 1 | 13 | email address, password clear |
| 537808 | 2018-04-09 | online accounts | y | 1 | 6151 | email address, password clear |
| 539927 | 2018-04-16 | parentini.com | y | 1 | 94 | email address, password clear |
| 540422 | 2018-04-17 | unknown | y | 31 | 4999 | email address, password clear |
| 540741 | 2018-04-18 | different online sites | y | 1 | 8091 | email address, password clear |
| 541298 | 2018-04-19 | unknown | y | 1 | 1096 | email address, password clear |
| 543239 | 2018-04-23 | gaming related | y | 1 | 577 | email address, password clear, game related details |
| 543251 | 2018-04-23 | unknown | y | 1 | 233 | email address, password clear, personal data |
| 543266 | 2018-04-23 | unknown | y | 1 | 3200 | email address, password clear |
| 543786 | 2018-04-24 | Spotify accounts | y | 1 | 496 | email address, password clear, account infos |
| 546088 | 2018-04-29 | unknown | y | 1 | 10583 | email address, password clear |
| 546450 | 2018-04-30 | Bitcoin related | y | 1 | 13510 | email address, password clear |
| 548083 | 2018-05-04 | unknown | y | 1 | 14598 | email address, password clear |
| 549613 | 2018-05-07 | vestidosonline related | y | 1 | 6242 | email address, password clear |
| 551929 | 2018-05-13 | unknown | y | 2 | 2056 | email address, password clear |
| 551935 | 2018-05-13 | ngv.nl | y | 1 | 3000 | username, phone, email, ip |
| 552697 | 2018-05-14 | unknown | y | 1 | 100000 | email address, password clear |
| 553235 | 2018-05-16 | www.armynavydeals.com | y | 1 | 4995 | email address, password clear |
| 553329 | 2018-05-16 | gameing related | y | 1 | 8166 | email address, password clear, gaming info |
| 555063 | 2018-05-19 | Spotify accounts | y | 1 | 18 | email address, password clear, subscription, status, country |
| 556613 | 2018-05-22 | unknown | y | 1 | 2187 | email address, password clear |
| 569422 | 2018-06-08 | rbandini.it | y | 1 | 3328 | email address, password clear |
| 565507 | 2018-06-09 | unknown | y | 1 | 6017 | email address, password clear |
| 565539 | 2018-06-09 | unknown | y | 1 | 8282 | email address, password clear |
| 566326 | 2018-06-11 | guitar related | y | 1 | 8112 | email address, password clear |
| 570109 | 2018-06-18 | lesinfosdusport.com | y | 2 | 294 | login, pass, nom, prenom, email, telephone, portable |
| 572774 | 2018-06-24 | unknown | y | 3 | 917 | email address, password clear |
| 573527 | 2018-06-25 | Casa Das Canetas | y | 1 | 12021 | email address, password clear |
| 574291 | 2018-06-27 | unknown | y | 1 | 11831 | email address, password clear |
| 578356 | 2018-07-03 | Pascal Obispo related | y | 1 | 3228 | email address, password clear |
| 578399 | 2018-07-03 | unknown | y | 2 | 261 | first_name, last_name, credit_card_type, cc_number, expdate_month, expdate_year, cvv2_number, cc_country_code, address1, zip, city, Land, KTO, BLZ, ip, useragent, login_email, login_password |
| 579307 | 2018-07-05 | Amazon credentials | y | 1 | 1146 | email address, password clear |
| 579554 | 2018-07-06 | unknown | y | 1 | 3701 | email address, password clear |
| 579655 | 2018-07-06 | unknown | y | 1 | 252 | email address, password clear, subscription details |
| 580331 | 2018-07-07 | unknown | y | 1 | 1828 | email address, password clear |
| 580820 | 2018-07-08 | unknown | y | 6 | 4664 | email address, password clear |
| 581217 | 2018-07-09 | jeux concours related | y | 1 | 14850 | email address, password clear |
| 581292 | 2018-07-09 | unknown | y | 1 | 2427 | email address, password clear |
| 581469 | 2018-07-10 | unknown | y | 1 | 5165 | email address, password clear |
| 581726 | 2018-07-10 | unknown | y | 1 | 3884 | email address, password clear |
| 581902 | 2018-07-10 | unknown | y | 1 | 9479 | email address, password clear |
| 583088 | 2018-07-12 | unknown | y | 1 | 13723 | email address, password clear |
| 583089 | 2018-07-12 | unknown | y | 1 | 10492 | email address, password clear |
| 585444 | 2018-07-17 | unknown | y | 1 | 6296 | email address, password clear |
| 587803 | 2018-07-22 | unknown | y | 1 | 578 | email address, password clear, Holder name, Address, Account type, Country, State, Phone, City, Zip, Bank, Card, Transactions |
| 588042 | 2018-07-22 | UPlay accounts | y | 1 | 1203 | email address, password clear, 2FA, Games, Platforms |
| 590251 | 2018-07-26 | le-tresor.fr | y | 1 | 1346 | email address, password clear |
| 590479 | 2018-07-26 | unknown | y | 2 | 5230 | email address, password clear |
| 591158 | 2018-07-27 | realtimepublishers.com | y | 1 | 483 | email address, password hashed |
| 591194 | 2018-07-28 | unknown | y | 1 | 4476 | email address, password clear |
| 593995 | 2018-08-02 | Online Games | y | 1 | 339 | email address, password clear, list of games |
| 595634 | 2018-08-06 | unknown | y | 1 | 5385 | email address, password clear |
| 600637 | 2018-08-16 | rennesencheres.com | y | 3 | 3616 | email address, password clear |
| 601984 | 2018-08-19 | Intellego, France related | y | 2 | 4957 | email address, password clear |
| 603085 | 2018-08-21 | Minecraft credentials | y | 1 | 6617 | email address, password clear |
| 603809 | 2018-08-22 | Gaming, Minecraft related | y | 1 | 2581 | email address, password clear |
| 608298 | 2018-09-01 | unknown | n | 1 | 86 | email address, password clear |
| 609099 | 2018-09-03 | www.editions-dangles.fr | y | 4 | 5305 | email address, password clear |
| 609695 | 2018-09-04 | www.spurweite-n.de | y | 2 | 1235 | email address, password clear |
| 611554 | 2018-09-08 | unknown | n | 1 | 540 | email address, password clear |
| 612029 | 2018-09-09 | Spotify Passwords | n | 1 | 1076 | email address, password clear |
| 612427 | 2018-09-10 | flaner-en-provence.fr | y | 2 | 3171 | address, email address, password clear |
| 614189 | 2018-09-14 | terre-net.fr | y | 2 | 2866 | email address, password clear |
| 616799 | 2018-09-16 | terre-net.fr | y | 1 | 2333 | email address, password clear |
| 617679 | 2018-09-17 | pollens.fr | y | 4 | 6461 | email address, password clear |
| 619009 | 2018-09-19 | coventgardenlife.com | y | 1 | 14104 | email address, password clear |
| 619010 | 2018-09-19 | unknown | n | 13 | 9108 | email address, password hashed |
| 622438 | 2018-09-25 | unknown | n | 1 | 304 | email address, password clear |
| 626463 | 2018-10-03 | zcover related | n | 19 | 92697 | email address, password clear |
| 626466 | 2018-10-03 | unknown | n | 3 | 150730 | email address, password clear |
| 626523 | 2018-10-03 | Spotifiy | n | 1 | 922 | email address, password clear, subscription info |
| 628458 | 2018-10-07 | unknown | n | 1 | 1032 | email address, password clear |
| 628479 | 2018-10-07 | piles44.com | y | 3 | 1782 | email address, password clear |
| 628709 | 2018-10-07 | bomport.fr | n | 7 | 6474 | email address, password hashed |
| 629095 | 2018-10-08 | unknown | n | 1 | 636 | email address, password clear |
| 629558 | 2018-10-08 | Minecraft related | n | 1 | 4119 | email address, password clear |
| 629620 | 2018-10-08 | parker.com | n | 2 | 3111 | email address, password clear |
| 629908 | 2018-10-09 | Minecraft related | n | 1 | 7609 | email address, password clear |
| 629910 | 2018-10-09 | Minecraft related | n | 1 | 6018 | email address, password clear |
| 630218 | 2018-10-10 | Streaming accounte | n | 2 | 2478 | email address, password clear |
| 631094 | 2018-10-12 | Minecraft related | n | 2 | 296 | email address, password clear |
| 632201 | 2018-10-14 | sofolk.fr | y | 1 | 614 | email address, password clear |
| 633150 | 2018-10-16 | unknown | n | 3 | 2594 | email address, password clear |
| 633243 | 2018-10-16 | dueemme related | n | 1 | 7170 | email address, password clear |
| 634205 | 2018-10-18 | jornmark.se | y | 2 | 11370 | email address, password clear |
| 634576 | 2018-10-19 | .SE related | n | 1 | 1183 | email address, password clear |
| 634747 | 2018-10-19 | amelioration-continue.fr | y | 8 | 5618 | email address, password clear |
| 635417 | 2018-10-20 | destock-sport-et-mode.com | y | 1 | 2309 | email address, password clear |
| 635633 | 2018-10-21 | unknown | n | 1 | 539 | email address, password clear |
| 635811 | 2018-10-21 | sunshine/holiday | n | 1 | 858 | email address, password clear |
| 636099 | 2018-10-22 | larecolte.fr | y | 5 | 4123 | email address, password clear |
| 636730 | 2018-10-23 | Instagram credentials | y | 1 | 12815 | email address, password clear |
| 637010 | 2018-10-24 | piles44.com | n | 9 | 5236 | email address, password clear |
| 637057 | 2018-10-24 | piles44.com | n | 10 | 6070 | email address, password clear |
| 637213 | 2018-10-24 | Spotify related | n | 1 | 946 | email address, password clear, Recurring date, Status, Country |
| 637428 | 2018-10-25 | terre-net.fr related | n | 5 | 4999 | email address, password clear |
| 638800 | 2018-10-28 | unknown | n | 1 | 1128 | email address, password clear |
| 639100 | 2018-10-28 | TeilSystemX related | n | 2 | 1274 | email address, password clear |
| 639935 | 2018-10-30 | Recrutement, Madagascar | n | 1 | 2107 | email address, password clear |
| 640023 | 2018-10-30 | PronoFootBall related | n | 3 | 16508 | email address, password clear |
| 640104 | 2018-10-30 | www.accessoires-camping-car.fr | y | 4 | 15033 | email address, password clear |
| 641345 | 2018-11-02 | jeuxsoc related | n | 1 | 2669 | email address, password clear |
| 645309 | 2018-11-10 | unknown | n | 1 | 163 | IP address, email address, password clear |
| 647639 | 2018-11-13 | unknown | n | 1 | 2066 | email address, password clear |
| 648051 | 2018-11-14 | Spotify | n | 2 | 1230 | email address, password clear, subscription, country code |
| 648840 | 2018-11-15 | Naturo, Coaching | n | 3 | 5320 | email address, passwords partially cracked |
| 651205 | 2018-11-20 | UPlay Accounts | n | 1 | 250 | email address, password clear, usernme, games |
| 653148 | 2018-11-24 | bulbs.co.uk | y | 1 | 2286 | email address, password clear |
| 653187 | 2018-11-24 | mittelalter related | n | 1 | 2858 | email address, password clear |
| 654747 | 2018-11-27 | Consulada, Portugal, Brasil | n | 1 | 10337 | email address, password clear |
| 658037 | 2018-12-03 | unknown | n | 1 | 727 | email address, password clear |
| 658839 | 2018-12-05 | accessoires-camping-car.fr | y | 4 | 15138 | email address, password clear |
| 659249 | 2018-12-05 | bddirect related | n | 7 | 5413 | email address, password clear |
| 659291 | 2018-12-05 | terrenet.fr | y | 5 | 11076 | email address, password clear |
| 660916 | 2018-12-08 | www.animaloo.fr | y | 1 | 4024 | email address, password clear |
| 662102 | 2018-12-10 | www.daelim.fr | y | 1 | 1277 | email address, password hashed |
| 662908 | 2018-12-11 | unknown | n | 2 | 10000 | email address, password clear |
| 663314 | 2018-12-12 | www.mifav.uniroma2.it | n | 1 | 1358 | email address, password hashed |
| 663653 | 2018-12-13 | www.dip.fr | n | 1 | 1406 | email address, password clear |
| 664509 | 2018-12-14 | www.lika.it | y | 1 | 3852 | email address, password hashed |
| 665734 | 2018-12-16 | www.golden-data.it | y | 2 | 799 | email address, password hashed |
| 667538 | 2018-12-19 | Apple related | n | 1 | 238 | email address, password clear |
| 667543 | 2018-12-19 | Placerarts, Grine | n | 1 | 14039 | email address, password clear |
| 668610 | 2018-12-21 | amelioration-continue.fr | y | 8 | 5647 | email address, password clear |
| 668928 | 2018-12-21 | Gaming related | n | 1 | 904 | email address, password clear, games |
| 670129 | 2018-12-24 | unknown | n | 1 | 10816 | email address, password hashed |
| 670608 | 2018-12-25 | coventgardenlife.com | y | 1 | 14103 | email address, password clear |
| 673006 | 2018-12-30 | secourisme.info | y | 6 | 2099 | email address, password clear |
| 674310 | 2019-01-02 | unknown | n | 1 | 60 | email address, password clear |
| 674908 | 2019-01-03 | secourisme.info | y | 1 | 3065 | email address, password clear |
| 675985 | 2019-01-05 | secourisme.info | y | 1 | 7863 | email address, password clear |
| 676251 | 2019-01-06 | unknown | n | 1 | 5156 | email address, password clear |
| 676609 | 2019-01-07 | unknown | n | 1 | 999 | email address, password clear |
| 677132 | 2019-01-08 | nordicknives.com | y | 1 | 1999 | email address, password clear |
| 677661 | 2019-01-09 | unknown | n | 1 | 519 | email address, password clear |
| 677855 | 2019-01-09 | secourisme.info | y | 9 | 15961 | email address, password clear |
| 678455 | 2019-01-10 | secourisme.info | y | 5 | 10731 | email address, password clear |
| 678458 | 2019-01-10 | secourisme.info | y | 7 | 10381 | email address, password clear |
| 678459 | 2019-01-10 | secourisme.info | y | 9 | 11858 | email address, password clear |
| 678460 | 2019-01-10 | secourisme.info | y | 5 | 7132 | email address, password clear |
| 678844 | 2019-01-11 | unknown | n | 1 | 1876 | email address, password clear |
| 679037 | 2019-01-11 | unknown | n | 2 | 9999 | email address, password clear |
| 679038 | 2019-01-11 | unknown | n | 1 | 10000 | email address, password clear |
| 679041 | 2019-01-11 | unknown | n | 1 | 9999 | email address, password clear |
| 679054 | 2019-01-11 | unknown | n | 2 | 10000 | email address, password clear |
| 679058 | 2019-01-11 | unknown | n | 1 | 10677 | email address, password clear |
| 679301 | 2019-01-12 | Minecraft | n | 1 | 6154 | email address, password clear |
| 680004 | 2019-01-13 | unknown | n | 1 | 2013 | email address, password clear |
| 682153 | 2019-01-17 | Minecraft | n | 1 | 9999 | email address, password clear |
| 682382 | 2019-01-17 | Premium for Family | n | 2 | 2617 | email address, password clear |
| 683621 | 2019-01-19 | Amsterdam, Rotterdam | n | 1 | 9999 | email address, password clear |
| 683621 | 2019-01-19 | Amsterdam, Rotterdam | n | 1 | 9999 | email address, password clear |
| 684156 | 2019-01-20 | Spotify credentials | n | 1 | 28 | email address, password cleari, plan, country, credit |
| 685091 | 2019-01-22 | Harley, Roadking, Waldorf | n | 2 | 13523 | email address, password clear |
| 685587 | 2019-01-22 | Financial Institution | n | 2 | 5393 | email address, password clear |
| 685639 | 2019-01-22 | unknown | n | 1 | 697 | email address, password clear |
| 685678 | 2019-01-22 | rodiola.it | y | 1 | 11000 | email address, password clear |
| 685679 | 2019-01-22 | rodiola.it | y | 2 | 10622 | email address, password clear |
| 685827 | 2019-01-23 | baincapital related | y | 2 | 202 | email address, password clear |
| 688750 | 2019-01-27 | unknown | n | 1 | 2035 | email address, password clear |
| 688870 | 2019-01-28 | Pallavolo, Volley | n | 1 | 2120 | email address, password clear |
| 689658 | 2019-01-29 | Netflix | n | 1 | 30 | email address, password clear, screens at a time, to pay, next bill date |
| 690362 | 2019-01-30 | unknown | n | 1 | 1163 | email address, password hashed |
| 690609 | 2019-01-31 | unknown | n | 1 | 1036 | email address, password hashed |
| 691733 | 2019-02-02 | Spotify | n | 1 | 5000 | email address, password clear |
| 692318 | 2019-02-03 | unknown | n | 1 | 92 | email address, password clear |
| 692649 | 2019-02-03 | schmuckschachterl | n | 4 | 4496 | email address, password clear |
| 693379 | 2019-02-05 | unknown | n | 1 | 4901 | email address, password clear |
| 694392 | 2019-02-07 | Bitcoin, Metabank | n | 1 | 14150 | email address, password clear |
| 694395 | 2019-02-07 | Bitcoin, Metabank, Cexio | n | 3 | 11810 | email address, password clear |
| 695952 | 2019-02-09 | Cryptomonnaies | y | 1 | 655 | name, url, username, password |
| 696611 | 2019-02-10 | Borsa, Merci, Modena, Italia | n | 1 | 3724 | email address, password clear |
| 704088 | 2019-02-22 | Minecraft related | n | 1 | 12922 | email address, password clear |
| 705515 | 2019-02-24 | eSports related | n | 1 | 3809 | email address, password clear |
| 707890 | 2019-02-26 | escrs.org | y | 3 | 2667 | email address, password clear |
| 711479 | 2019-03-03 | Online Gaming | n | 1 | 203 | user name, email address, password clear |
| 714040 | 2019-03-06 | offcourses.net | y | 12 | 8928 | email address, password clear |
| 714425 | 2019-03-07 | Kuba related | n | 1 | 8088 | email address, password clear |
| 716103 | 2019-03-08 | Netflix Premium | n | 1 | 36 | email address, password clear |
| 718924 | 2019-03-11 | Spotify | n | 1 | 1135 | email address, password clear, subscription |
| 720898 | 2019-03-13 | multimediahrd.com | y | 1 | 3647 | email address, password clear |
| 726567 | 2019-03-20 | Spotify Premium Accounts | n | 1 | 587 | email address, password clear |
| 727247 | 2019-03-21 | EcoSystemu Sare | n | 2 | 2312 | email address, password clear |
| 729812 | 2019-03-24 | cemaden.gov.br | n | 1 | 1895 | email address, password hashed |
| 730311 | 2019-03-25 | Poker related | n | 1 | 3054 | email address, password clear |
| 730392 | 2019-03-25 | Arabic, Indonesia | n | 1 | 15038 | email address, password clear |
| 733476 | 2019-03-29 | unknown | n | 1 | 28 | email address, password clear |
| 734229 | 2019-03-30 | unknown | n | 1 | 300 | email address, password clear |
| 734237 | 2019-03-30 | unknown | n | 1 | 1599 | email address, password clear |
| 734239 | 2019-03-30 | Pokemon, Gaming | n | 3 | 10974 | email address, password clear |
| 745805 | 2019-04-15 | Netflix | n | 1 | 32 | email address, password clear |
| 748285 | 2019-04-18 | Online Forum | n | 1 | 8263 | email address, password clear |
| 755772 | 2019-04-28 | telediu.com.br | y | 1 | 5831 | email address, password clear |
| 759995 | 2019-05-02 | Online Gaming | n | 1 | 1317 | email address, password clear, username, followers, prime, turbo, bits |
| 763074 | 2019-05-06 | Related: Corto Maltese | n | 1 | 2000 | email address, password clear |
| 766960 | 2019-05-10 | Netflix accounts | n | 1 | 65 | email address, password clear |
| 769920 | 2019-05-11 | jeuxsoc.fr | y | 1 | 2809 | email address, password hashed |
| 776216 | 2019-05-15 | unknown | n | 1 | 1001 | email address, password clear |
| 776660 | 2019-05-16 | Spotify | n | 1 | 1239 | email address, password clear, country, plan |
| 777323 | 2019-05-17 | sequoia.co.uk | y | 1 | 10849 | email address, password hashed |
| 783643 | 2019-05-27 | Lucas-Games/Soccer | n | 1 | 1038 | email address, password clear |
| 784506 | 2019-05-28 | Minecraft | n | 1 | 5001 | email address, password clear, list of games |
| 786782 | 2019-06-01 | Spotify | n | 1 | 4315 | email address, password clear |
| 786951 | 2019-06-01 | Spotify | n | 1 | 1263 | email address, password clear |
| 786976 | 2019-06-01 | unknown | n | 17 | 5024 | email address, password hashed |
| 787177 | 2019-06-01 | unknown | n | 1 | 1993 | email address, password hashed |
| 787202 | 2019-06-01 | unknown | n | 1 | 11538 | email address, password hashed |
| 789258 | 2019-06-03 | Spotify | n | 1 | 3547 | email address, password clear |
| 797734 | 2019-06-13 | Insurance, South Africa | n | 2 | 10149 | email address, password clear |
| 798446 | 2019-06-14 | unknown | n | 1 | 8673 | email address, password clear |
| 799650 | 2019-06-16 | Online Gaming | n | 1 | 886 | email address, password clear |
| 804822 | 2019-06-24 | minecraft related | n | 1 | 2189 | email address, password clear |
| 805993 | 2019-06-26 | unknown | n | 1 | 200 | username, email address, password clear |
| 808177 | 2019-06-29 | Minecraft | n | 1 | 4238 | email address, password clear |
| 808205 | 2019-06-29 | Spotify | n | 1 | 3455 | email address, password clear, Type, Country |
| 808875 | 2019-06-30 | Spotify or Netflix | n | 1 | 2534 | email address, password clear |
| 814093 | 2019-07-09 | unknown | n | 1 | 510 | email address, password clear |
| 814093 | 2019-07-09 | greatesthitsmailorder.com | y | 2 | 717 | logname, shop, name, password, email, street, city, country, zipcode, phone, fax, ID, DatumAnlage, LastVisit, Rolle |
| 814393 | 2019-07-09 | Netflix | n | 1 | 39 | email address, password clear |
| 816323 | 2019-07-12 | unknown | n | 2 | 226 | email address, password clear |
| 818012 | 2019-07-15 | online game creation | n | 1 | 9011 | email address, password clear |
| 818224 | 2019-07-15 | unknown | n | 1 | 4405 | email address, password clear |
| 819159 | 2019-07-17 | Fussball related | n | 1 | 10430 | email address, password clear |
| 821438 | 2019-07-20 | Werbegeschenke related | n | 12 | 7695 | email address, password hashed |
| 824644 | 2019-07-25 | PL related | n | 1 | 2243 | email address, username, password hashed, name, surename |
| 835472 | 2019-08-11 | unknown | n | 1 | 1500 | email address, password clear, user name |
| 837154 | 2019-08-13 | Spotify | n | 1 | 571 | email address, password clear, country, subscription, renewal, address, postalcode, city |
| 842356 | 2019-08-21 | Amarelo, Brazil related | n | 1 | 5964 | email address, password clear |
| 843835 | 2019-08-24 | Spotify alike site | n | 1 | 1679 | email address, password clear, Subscription, Country, Screens, NextBillingDate |
| 846133 | 2019-08-28 | Spotify accounts | n | 1 | 625 | email address, password clear |
| 851781 | 2019-09-06 | Sports related | n | 1 | 7360 | email address, password clear |
| 854227 | 2019-09-09 | unknown | n | 1 | 3674 | email address, password clear |
| 858115 | 2019-09-14 | picaldi related | n | 1 | 5081 | email address, password clear |
| 858724 | 2019-09-15 | sports related | n | 1 | 9174 | email address, password clear, CC, expire date |
| 862853 | 2019-09-21 | unknown | n | 1 | 48 | email address, password clear |
| 863415 | 2019-09-22 | Netflix | n | 1 | 400 | email address, password cleari, plan, screens, hd, uhd, expires, country |
| 864902 | 2019-09-24 | mondomagia.com | y | 1 | 4176 | email address, password clear |
| 867035 | 2019-09-28 | Spotify Accounts | n | 1 | 4075 | email address, password clear, date, country code |
| 870414 | 2019-10-03 | LinkedIn related | n | 2 | 14465 | email address, password clear |
| 876156 | 2019-10-06 | prixacces.ca | y | 1 | 1623 | email address, password hashed, FirstName, LastName |
| 892463 | 2019-10-20 | Spotify Accounts | n | 1 | 378 | email address, password clear, date, country code |
| 903395 | 2019-10-31 | .CZ .SK related | n | 1 | 9111 | email address, password clear |
| 915158 | 2019-11-11 | Brazil related | n | 1 | 6789 | email address, password clear |
| 918613 | 2019-11-14 | .LU company | n | 5 | 5 | email address, password clear, forgot password question, forgot password answer, forgot password mobile phone |
| 921497 | 2019-11-17 | unknown | n | 1 | 1175 | email address, password clear |
| 924004 | 2019-11-20 | unknown | n | 1 | 979 | email address, password clear |
| 933675 | 2019-11-29 | DisneyPlus related | y | 1 | 941 | email address, password clear, plan, expire date |
| 935912 | 2019-12-01 | Compras Brazil related | n | 2 | 8804 | email address, password clear |
| 942555 | 2019-12-08 | unknown | n | 1 | 294 | email address, password clear |
| 950178 | 2019-12-15 | integrame.ro | y | 1 | 6394 | email address, password clear |
| 950377 | 2019-12-15 | unknown | n | 2 | 2924 | email address, password clear |
| 956458 | 2019-12-20 | unknown | n | 1 | 508 | email address, password clear |
| 964059 | 2019-12-27 | unknown | n | 1 | 88 | email address, password clear |
| 972201 | 2020-01-06 | khat-systems.de | y | 9 | 5312 | email address, password hashed |
| 975681 | 2020-01-10 | unknown | n | 1 | 2687 | email address, password hashed |
| 977314 | 2020-01-12 | SMTP credentials | n | 1 | 884 | email address, password clear |
| 977699 | 2020-01-12 | unknown | n | 1 | 6168 | email address, password clear |
| 986325 | 2020-01-21 | Online Gaming | n | 1 | 24 | email address, password clear, Robux, Rap, Username |
| 988719 | 2020-01-23 | Pokemon, Minecraft | n | 2 | 9999 | email address, password clear |
| 988757 | 2020-01-23 | unknown | n | 1 | 3230 | email address, password clear |
| 990380 | 2020-01-26 | Spotify | n | 1 | 979 | email address, password clear |
| 1006117 | 2020-02-15 | unknown | n | 3 | 3343 | email address, password clear |
| 1009376 | 2020-02-18 | unknown | n | 1 | 300 | email address, password clear |
| 1018724 | 2020-02-27 | vaccum cleaner related | n | 1 | 481 | email address, password clear |
| 1025269 | 2020-03-02 | Robolox related | n | 1 | 9474 | email address, password clear |
| 1035453 | 2020-03-08 | Online Gaming | n | 1 | 268 | email address, password clear, games |
| 1035988 | 2020-03-08 | unknown | n | 1 | 1001 | email address, password hashed, contact details |
| 1041210 | 2020-03-12 | Gaming, Shopping | n | 1 | 15000 | email address, password clear |
| 1049705 | 2020-03-16 | Spotify | n | 1 | 758 | email address, password clear, country, expiration |
| 1051017 | 2020-03-17 | Indonesia related | n | 1 | 4334 | email address, password clear |
| 1053783 | 2020-03-19 | Spotify | n | 1 | 9632 | email address, password clear |
| 1054233 | 2020-03-19 | frankentipps.de | y | 1 | 5976 | email address, password hashed |
| 1064962 | 2020-03-25 | NordVPN accounts | y | 1 | 21 | email address, password clear |
| 1072480 | 2020-03-29 | Spotify accounts | n | 1 | 548 | email address, password clear |
| 1073844 | 2020-03-30 | Lovoo accounts | n | 1 | 865 | email address, password clear, GENRE, Age, Credit, Ville |
| 1074290 | 2020-03-30 | Galicia related | n | 1 | 4000 | email address, password clear |
| 1079649 | 2020-04-02 | inrix.com | y | 1 | 237 | email address, shipment and payment details |
| 1157035 | 2020-06-09 | Student users | y | 1 | 2316 | email address, password clear |
| 1190045 | 2020-07-09 | Email accounts | n | 1 | 4387 | email address, password clear |
| 1192311 | 2020-07-11 | unknown | n | 1 | 304 | email address, password clear |
| 1193297 | 2020-07-12 | potential test data | n | 1 | 99 | PII, email address, password clear |
| 1195050 | 2020-07-14 | kingofstreams.com | n | 1 | 1943 | ID, user_login, user_pass, user_nicename, user_email, user_url, user_registered, user_activation_key, user_status, display_name |
| 1203419 | 2020-07-22 | unknown | n | 1 | 5500 | email address, password clear |
| 1204998 | 2020-07-23 | Microsoft Online | y | 0 | 2523 | email address, password clear |
| 1207785 | 2020-07-27 | unknown | n | 1 | 1775 | email address, password clear, plan screen country |
| 1216568 | 2020-08-03 | unknown | n | 2 | 8118 | email address, password hashed |
| 1220170 | 2020-08-07 | unknown | n | 2 | 8020 | email address, password clear |
| 1222315 | 2020-08-11 | SMTP + webmail | n | 1 | 113 | hostname, port, email address, password clear |
| 1224522 | 2020-08-13 | panrus.com | y | 1 | 2591 | email address, password clear |
| 1237221 | 2020-08-26 | article123 related | n | 1 | 5295 | email address, password clear |
| 1237791 | 2020-08-26 | Microsoft accounts | y | 2 | 5409 | email address, password clear |
| 1246480 | 2020-09-01 | engelhardt | n | 3 | 1419 | email address, password clear |
| 1247093 | 2020-09-02 | Reality kings accounts | n | 1 | 63 | email address, password clear |
| 1250417 | 2020-09-02 | teviloj.fr | n | 1 | 1477 | email address, password hashed |
| 1256250 | 2020-09-05 | education related | n | 2 | 3252 | email address, password clear |
| 1256958 | 2020-09-06 | Phishing | n | 5 | 222 | email address, password clear, IP address, city |
| 1260855 | 2020-09-10 | out door selling | n | 1 | 6603 | email address, password clear |
| 1260855 | 2020-09-10 | out door selling | n | 1 | 6603 | email address, password clear |
| 1269810 | 2020-09-15 | Spotify accounts | n | 1 | 150 | email address, password clear |
| 1277529 | 2020-09-24 | VPN credentials | n | 1 | 1024 | email address, password clear |
| 1288107 | 2020-10-01 | unknown | n | 1 | 54 | email address, password hashed |
| 1311495 | 2020-10-17 | Login Data | n | 1 | 1 | Users Chrome Login Data for various sites |
| 1326247 | 2020-11-02 | SMTP credentials | n | 1 | 1522 | hostname:port, email address, password clear |
| 1339191 | 2020-11-11 | LinkedIn related | n | 3 | 15365 | email address, password clear |
| 1355017 | 2020-11-19 | SMTP credentials | n | 1 | 2310 | URL, METHOD, MAILHOST, MAILPORT, MAILUSER, MAILPASS, MAILFROM, FROMNAME |
| 1358055 | 2020-11-21 | unknown | n | 2 | 4999 | email address, password clear |
| 1362729 | 2020-11-24 | Cit0day.in | y | 7 | ~23.000 | compromised user databases |
| Data Leak | y | ~3.000 | ~26.000.000 | email address, password hashed/clear | ||
| 1364975 | 2020-11-25 | Turkey, Mekanist | n | 1 | 9616 | email address, password clear |
| 1375223 | 2020-11-30 | SMTP credentials | n | 1 | 565 | URL, METHOD, MAILHOST, MAILPORT, MAILUSER, MAILPASS, MAILFROM, FROMNAME |
| 1413373 | 2020-12-24 | ledger.com | y | 151 | 1075381 | email address |
| 1413373 | 2020-12-24 | ledger.com | y | 371 | 272853 | email address, last name, first name, postal address, country, telephone number |
| 1435025 | 2021-01-10 | Minecraft | n | 2 | 20000 | email address, password clear |
| 1449261 | 2021-01-21 | SMTP credentials | n | 1 | 5115 | hostname, port, email address, password clear |
| 1476886 | 2021-02-10 | SMTP credentials | n | 2 | 2763 | url, method, mailhost, mailport, mailuser, mailpass, mailaddr |
| 1504386 | 2021-03-03 | unknown | n | 1 | 484 | email address, password clear |
| 1515487 | 2021-03-10 | unknown | n | 1 | 1246 | email address, password clear |
| 1609297 | 2021-04-26 | shein.com | y | 1 | 15020 | email address, password clear |
| 1627766 | 2021-05-09 | Online Gaming | n | 1 | 779 | Useri, Pass, Region, State, Last Played, Summoner, EMail, Riot Id, Verified, Mail Access, RP, BE, Level, Refund Credits, Refundable RP, Champions |
| 1627811 | 2021-05-09 | jeanmichel.net | y | 7 | 1298 | email address, password clear |
| 2057730 | 2021-07-02 | Minecraft TheVace | n | 2 | 11395 | email address, password clear |
| 2124300 | 2021-09-03 | Onicloud related | n | 2 | 2193 | id, first-name, last-name, email address, password hashed, last-ip, … |
| 2153566 | 2021-09-28 | Heredis.com | y | 400 | 245276 | email address, paaaword hashed, pseudo, nom, prenom, adresse1, adresse2, codepostal, ville, pays, versionLicence, dateCreation, derniereConnexion, … |
| 2263103 | 2021-12-20 | livrodirecto.pt | y | 1 | 6958 | email address, password clear |
| 2263109 | 2021-12-20 | Various | y | 7 | 21933 | email address, password clear |
| 2296961 | 2022-01-10 | testingit.dk | y | 1 | 755 | email address, password clear |
| 2507694 | 2022-06-17 | onearth.com.br | y | 7 | 2904 | first_name, last_name, email, password, location, title, description, tags, avatar, language, theme, tfa_secret, status, role, token, last_access, last_page, provider, external_identifier, auth_data, email_notifications |
| 3099393 | 2023-01-11 | ReadLine Stealer | y | 1 | 235 | URL, username, password clear, application |
| 3190606 | 2023-03-18 | box-lameloise.fr | y | 5 | 5087 | email address |
| 3826026 | 2024-05-10 | www.abramis.co.uk | y | 1 | 1305 | email address |
| 4039256 | 2024-08-21 | Aggregation from Telegram channels and Malware stealers | y | 17.548 | ~68.1 Mio. | email address, username, password clear, target url |
How do you find these leaks?
At CIRCL, we develop multiple tools to find information leaks. One of the tool is AIL - Analysis Information Leak framework which is an open source software that can be installed to find leak of information in a stream of data. We use such tools to mine the initial information where an analyst review the information to confirm or deny the leak.
Contact
If you have any question or suggestion about this topic, feel free to contact us.
Classification of this document
TLP:WHITE information may be distributed without restriction, subject to copyright controls.
Revision of the text (not the table)
- Version 1.0 - 05 October 2016 - TLP:WHITE
- Version 1.1 - 30 January 2017 - TLP:WHITE
- Version 1.2 - 10 February 2017 - TLP:WHITE