Troy HuntNov 6
This has been an extraordinary set of data to process: 1.3B unique passwords, 2B unique email addresses (including mine 😭) and almost 3M of our @haveibeenpwned subscribers in there. It’s been weeks of processing to get this loaded, and finally, it’s done https://www.troyhunt.com/2-billion-email-addresses-were-exposed-and-we-indexed-them-all-in-have-i-been-pwned/
2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned

I hate hyperbolic news headlines about data breaches, but for the "2 Billion Email Addresses" headline to be hyperbolic, it'd need to be exaggerated or overstated - and it isn't. It's rounded up from the more precise number of 1,957,476,021 unique email addresses, but other than that,

Troy Hunt
Show threadMike

@haveibeenpwned @troyhunt Here's an interesting fun fact.

We had an email and password appear in this dataset for an account that has never existed in our domain.

However, somebody has been password spraying that username against us since at least October of 2023.

Nov 6 at 7:25pmWeb
Show threadTroy HuntNov 6
@0DOM @haveibeenpwned wow, yeah, that is interesting