Data breach
Naz.API
70 840 771 accounts exposed in a breach dated 2023-09-20.
Breached2023-09-20Added to HIBP2024-01-17 UTCUpdated by HIBP2024-01-17 UTCAccounts70 840 771Domain—
Verified
What happened in Have I Been Pwned’s words
In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum. The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords.
Exposed data as HIBP classifies it
- Email addresses
- Passwords
How HIBP qualifies it
- HIBP verified that the data came from this service.
HIBP names no domain for this breach.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC