Cit0Day

Cit0Day was a private service that aggregated leaked credentials and provided them to cybercriminals. In November 2020 the service was shut down and its entire collection containing data from over 23000 compromised websites was leaked online. The massive archive included approximately 226 million unique records including email addresses and passwords. While some passwords were encrypted using various hashing algorithms many were stored in plain text. The collection was organized into categories such as gaming forums and retail sites providing a comprehensive database of previously stolen credentials for further credential stuffing attacks.