56 Million Emails and 124 Million Passwords Exposed in Massive Malware Theft – How to Check If You're Affected
A massive dataset of credentials stolen from millions of devices has been added to the Have I Been Pwned breach database, revealing 56 million unique email addresses and 124 million unique passwords. The records were collected from various infostealer malware sources.
Individuals can check if their email addresses are included by searching on Have I Been Pwned. The passwords from the collection have also been added to the site’s searchable password database, allowing users to verify if specific passwords have been compromised. However, actual passwords are not shown when searching by email.
This update highlights the ongoing risk of malware attacks. Users whose data appears in the breach are strongly advised to change passwords on every affected account and enable two-factor authentication wherever supported.