NumPass 80M

In August 2023 a massive collection of credentials known as NumPass surfaced on the dark web targeting Russian internet users. The dataset contains approximately 80 million records consisting of mobile phone numbers and associated passwords. This incident is not a single breach of one platform but rather a massive aggregation of data sourced from previous leaks and info-stealing malware logs. The scale of the leak poses a significant threat for credential stuffing attacks as many individuals reuse the same passwords across multiple services and platforms.