HIBP adds trove of 1.3B stolen passwords
7d
Developing
1
Threat‑intel firm Synthient compiled and surfaced a massive dataset of 1.3 billion unique passwords and 2 billion unique email addresses from open and dark‑web sources, which security researcher Troy Hunt verified and added to Have I Been Pwned in late November 2025. The trove blends credential‑stuffing lists from past breaches with fresh credentials stolen by info‑stealing malware, and Hunt’s tests indicate the presence of new exposures not seen in prior breaches.
Cybersecurity
Data Breaches and Privacy