Data breach
Kayo.moe Credential Stuffing List
41 826 763 accounts exposed in a breach dated 2018-09-11.
Breached2018-09-11Added to HIBP2018-09-13 UTCUpdated by HIBP2018-09-13 UTCAccounts41 826 763Domain—
Unverified
What happened in Have I Been Pwned’s words
In September 2018, a collection of almost 42 million email address and plain text password pairs was uploaded to the anonymous file sharing service kayo.moe. The operator of the service contacted HIBP to report the data which, upon further investigation, turned out to be a large credential stuffing list. For more information, read about The 42M Record kayo.moe Credential Stuffing Data.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP could not verify that the data came from this service.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC