Weekly update is up! Live from Dubai with @scotthelme.bsky.social! My Changing View on Sponsorships; Scott on Moving to Dubai; On the Overhead of Support www.troyhunt.com/weekly-updat...

New sensitive breach: Europid dating service WhiteDate had 6k unique emails breached last month, among extensive other personal data including physical attributes and IQ level. 59% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/White...

We’re Live from Dubai with Scott Helme! My Changing View on Sponsorships; Scott on Moving to Dubai; On the Overhead of Support

Weekly update is up! Upcoming Travel; Reaching IoT Shelly Nirvana; Physical Security Meets Digital with Ubiquiti: www.troyhunt.com/weekly-updat...

New breach: WIRED magazine had 2.3M records allegedly breached from parent company Condé Nast and published online this week. Data included email and display name, some records contained additional personal data. 81% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/WIRED

Big thanks to @malwarebytes.com for sponsoring my blog this week! Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing www.malwarebytes.com/browserguard...

Take 2! 987018

Going live with my weekly update in 10 mins! Upcoming Travel; Reaching IoT Shelly Nirvana; Physical Security Meets Digital with Ubiquiti

New breach: Russian airline Utair had 400k customer email addresses breached in 2019 and discovered the following year. Data also included name, physical address, DoB and passport number. 79% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Utair

A good mix of real security fails & a healthy dose of snark. @eff.org: 'The Breachies 2025: The Worst, Weirdest, Most Impactful Data Breaches of the Year.' Congrats (?) @troyhunt.com? www.eff.org/deeplinks/20... #cybersecurity @gate15.bsky.social @campuscodi.risky.biz @ransomwaresommelier.com

New sensitive breach: Russian pharmaceutical company Gemotest had 31M records with 6.3M unique email addresses breached in 2022. Data included name, DoB, physical address, passport and insurance numbers. 70% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Gemot...

Weekly update is up! IoT all the things! A full walkthrough of all the connected stuff, warts and all. www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 10 minutes! IoT all the things! A full walkthrough of all the connected stuff, warts and all. youtube.com/live/M5eRKlO...

Big thanks to @1password.bsky.social for sponsoring my blog this week! 1Password Extended Access Management: Secure every sign-in for every app on every device. 1password.com/troyhunt

New breach: French vehicle inspection company AUTOSUR had 10M records with 487k unique email addresses breached in March. Data also included name, address, phone and vehicle details. 78% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/AUTOSUR

New breach: Now defunct forum for making money with botting "The Botting Network" was breached in 2012, exposing 96k records. Data included email address, username, DoB and salted MD5 password hashes. 97% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/TheBo...

New breach: In July 2016, the Web Hosting Talk vBulletin forum had 515k records breached. Data included email and IP address, username and salted Md5 password hash. 85% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/WebHo...

Weekly update is up! Spicers Pwned (and visited); 630 Million Passwords via the FBI; Qantas Breach Spam www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 13 mins! Spicers Pwned (and visited); 630 Million Passwords via the FBI; Qantas Breach Spam youtube.com/live/LXDI04Q...

We're very happy to help the FBI with processing another 630M passwords recently seized from a suspect. This includes 46M we'd never seen before, which are now all in @haveibeenpwned.com's Pwned Passwords, where they're queried 18 *billion* times a month: www.troyhunt.com/processing-6...

New breach: Russian streaming service KinoKong had over 800k records breached in March 2021. Data included email, name, username, IP address and MD5 password hash. 64% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/KinoK...

Weekly update is up! It's @haveibeenpwned.com's 12th-birthday celebrtation, with special guest Charlotte Hunt 😊 www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 15 mins! It's the Have I Been Pwned 12th Birthday Special with Charlotte! youtube.com/live/fKkcx4d...

I've had this dumb report too many times, and Bruce has finally tipped me over the edge. @haveibeenpwned.com is a real service that looks up email addresses in actual data breaches, but some people don't understand what an email address actually is www.troyhunt.com/why-does-hav...

Happy birthday @haveibeenpwned.com! 12 years ago today, I pushed out a blog post launching a little data breach search tool, and life changed forever. Reading the post again now, did I get it right? 😎 www.troyhunt.com/introducing-...

New breach: The Nissan 240SX Silvia and Z Fairlady car forum Zilvia[.]net had 288k records breached and leaked in Nov. Data included email and IP address, username and salted MD5 password hash. 81% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Zilvia

Weekly update is up! The Australian Under 16 Social Media Ban: Parenting Responsibilities, Government Control, Privacy and Identity Verification www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 15 mins! The Australian Under 16 Social Media Ban: Parenting Responsibilities, Government Control, Privacy and Identity Verification youtube.com/live/er_acho...

New breach: The China Software Developer Network (CSDN) had 6.4M records breached in 2011. Data included email address, username and plain text password. 80% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/CSDN

New breach: Online coding practice tool CodeStepByStep had 17k records breached last week. Data included name, username and email address. 61% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/CodeS...

Weekly update is up! Record (?) HIBP Traffic Month; The Week in Breaches; IoT Water Meter Reader with Home Assistant and AI www.troyhunt.com/weekly-updat...

New breach: In March, 1.8M records allegedly obtained from the ADDA housing societies service was posted to a public hacking forum. Data included email, name, phone and MD5 password hash. 67% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/ADDA

Big thanks to @1password.bsky.social for sponsoring my blog this week. 1Password Extended Access Management: Secure every sign-in for every app on every device. 1password.com/troyhunt

Going live with my weekly vid in 15 mins! Record (?) HIBP Traffic Month; The Week in Breaches; IoT Water Meter Reader with Home Assistant and AI youtube.com/live/h4lzcex...

New breach: The International Kiteboarding Organization had 340k records breached this month. Data included email address, name, username and geolocation. 70% were already in @haveibeenpwned.com . Read more: haveibeenpwned.com/Breach/IKO

New breach: Beckett Collectibles experienced a breach and website content defacement this month. A portion of the data leaked publicly, including more than 500k alleged North American email addresses. 84% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Beckett

New breach: Eurofiber France had 10k unique email addresses breached last week in an attack on its ticket management platform. Some records also included name and phone number. 33% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Eurof...

New breach: Vultr had 188k email addresses breached via a security incident at a third-party in 2022. Some records also contained name, IP and country. 44% were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Vultr

We’ve had an absolutely MASSIVE month at @haveibeenpwned.com! 20M visitors, billions of processed records, a major rewrite of our ingestion pipeline (thanks @stebet.net!) and seemingly endless support tickets and other enquires. Every time I think it’s peaked…

Weekly update is up! Home Sweet Home; Lessons From Processing Those 2B Email Addresses; I Spoke at Europol in The Hague; Operation Endgame 3.0 www.troyhunt.com/weekly-updat...

Big thanks to Malwarebytes for sponsoring my blog this week! Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsing www.malwarebytes.com/browserguard...

Going live with my weekly vid in half an hour! Home Sweet Home; Lessons From Processing Those 2B Email Addresses; I Spoke at Europol in The Hague; Operation Endgame 3.0 youtube.com/live/B46JhYw...

Weekly update is up: I’m in Belgium! Here’s everything that went wrong with loading 2 billion breached email addresses… www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 10 mins: I’m in Belgium! Here’s reaching that went wrong with loading 2 billion breached email addresses…

New sensitive breach: Hungarian political party TISZA suffered a breach of its TISZA Világ platform last month, exposing 200k records, later published online. Data included email, name, phone & physical address. 41% were already in @haveibeenpwned.com. More: haveibeenpwned.com/Breach/Tisza

New credential stuffing data: Synthient aggregated billions of threat data records from social media, forums, Tor and Telegram. Data included 2B unique email addresses and 1.3B unique passwords. 76% of emails were already in @haveibeenpwned.com. Read more: haveibeenpwned.com/Breach/Synth...

This has been an extraordinary set of data to process: 1.3B unique passwords, 2B unique email addresses (including mine 😭) and almost 3M of our @haveibeenpwned.com subscribers in there. It’s been weeks of processing to get this loaded, and finally, it’s done www.troyhunt.com/2-billion-em...

Weekly update is up! I’m in Norway; Loading 1,957,476,021 Breached Email Addresses is Hard; Qantas Data Continues to Spread; PC Build Thread www.troyhunt.com/weekly-updat...

Going live with my weekly vid in 15 minutes! I’m in Norway; Loading 1,957,476,021 Breached Email Addresses is Hard; Qantas Data Continues to Spread; PC Build Thread youtube.com/live/etA4EWZ...

Cybersecurity experts are warning that injunctions – an increasingly popular legal tactic flaunted as protecting data breach victims – are putting people at greater risk of cybercrime. More from @troyhunt.com, Cythera's Euan Prentice, Dvuln's Jamieson O'Reilly and Cyber Cognition's Michael Collins.