Data breach
Collection #1
772 904 991 accounts exposed in a breach dated 2019-01-07.
Breached2019-01-07Added to HIBP2019-01-16 UTCUpdated by HIBP2019-01-16 UTCAccounts772 904 991Domain—
Unverified
What happened in Have I Been Pwned’s words
In January 2019, a large collection of credential stuffing lists (combinations of email addresses and passwords used to hijack accounts on other services) was discovered being distributed on a popular hacking forum. The data contained almost 2.7 billion records including 773 million unique email addresses alongside passwords those addresses had used on other breached services. Full details on the incident and how to search the breached passwords are provided in the blog post The 773 Million Record "Collection #1" Data Breach.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP could not verify that the data came from this service.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC