Breach Intelligence

2,693

Total breached databases

Search breaches

The Collection #2 data breach is part of a larger series of data dumps, including Collections #1 through #5, which compiled email addresses and passwords from thousands of sources, from previously known data breaches and some new alleged breaches. Collection #1 alone contained about 2.7 billion records, including 1.2 billion unique email and password combinations, 773 million unique email addresses, and 21 million unique plaintext passwords. Additional collections, named Collections #2 through #5, along with "AP MYR&ZABUGOR #2" and "ANTIPUBLIC #1," were also discovered, significantly adding to the scope of compromised data​.
On Tuesday, February 2, it was leaked on a popular hacking forum. It contains billions of user credentials from past leaks from Netflix, LinkedIn, Exploit.in, Bitcoin and more. This leak is comparable to the Breach Compilation of 2017, in which 1.4 billion credentials were leaked.
  • Date: Feb 2, 2021
  • Category: Compilations & Combo lists
  • Numer of lines: 3,279,064,312
  • Records Imported: 3,278,652,074
  • Size: 98.98 GB
  • Data: Email Addresses, Passwords
  • Passwords: Plaintext
  • Imported:
  • Source: cybernews.com
April 8th, 2024, a Threat Actor operating under the moniker "USDoD" placed a large database up for sale on Breached titled: "National Public Data". They claimed it contained 2,900,000,000 records on United States citizens
  • Date: Apr 8, 2024
  • Domain: nationalpublicdata.com
  • Threat Actor: USDoD
  • Country: United States
  • Category: Data Brokers
  • Records Announced: 2,900,000,000
  • Numer of lines: 2,695,681,513
  • Records Imported: 2,695,681,511
  • Size: 277.09 GB
  • Data: Birthdates, Names, Phone Numbers, Physical Locations, Social Security Numbers
  • Passwords: No
  • Imported:
  • Sources:
In December 2016, a huge list of email address and password pairs appeared in a "combo list" referred to as "Anti Public". The list contained 458 million unique email addresses, many with multiple different passwords hacked from various online systems. The list was broadly circulated and used for "credential stuffing", that is attackers employ it in an attempt to identify other online systems where the account owner had reused their password.
  • Date: Dec 16, 2016
  • Category: Compilations & Combo lists
  • Records Announced: 457,962,538
  • Numer of lines: 1,545,422,902
  • Records Imported: 1,540,820,165
  • Size: 47.27 GB
  • Data: Email Addresses, Passwords
  • Passwords: Plaintext
  • Imported:
  • Sources:
In August 2024, Tencent experienced a major data breach that exposed the personal data of 1.4 billion user accounts. This breach was orchestrated by a hacker known as "Fenice," and the compromised data included sensitive information such as email addresses, phone numbers, and QQ IDs.
  • Date: Aug 2024
  • Domain: tencent.com
  • Threat Actor: Fenice
  • Country: Switzerland
  • Category: Technology
  • Records Announced: 1,400,000,000
  • Numer of lines: 1,468,566,171
  • Size: 31 GB
  • Data: Email Addresses, Phone Numbers, Social Profiles
  • Passwords: No
  • Imported: