LeakOSINTbot

At the beginning of 2025, a huge collection of logs was published in the ALEN TXTBASE telegram channel. The data were collected using stealers — viruses that steal logins and passwords stored in browsers. After deduplication, 2.8 billion unique records remained with mail, phones, nicknames, IP addresses, plaintext passwords, and site or app names.

In the summer of 2024, a new version of the RockYou password compilation was published. It contains about 10 billion password strings previously seen in open breaches — useful for password strength checks and hash cracking.

A huge collection published in February 2020 containing 3.2 billion lines of email and plaintext passwords (1.28 billion unique), likely compiled from many other leaks.

In January 2019, a five-part collection appeared on a hacker forum combining data from many sites — 108 thousand files totaling 870GB and 4.3 billion unique email/password pairs.

Large Email:Pass collection assembled on May 18, 2023 from many files. After deduplication, about 2 billion unique lines remained.

All files from the Breached.vc Combolists section downloaded on 02.22.2023 — 770 million unique email/password lines after deduplication.

Reverse index created in March 2023 mapping passwords to all emails that used them — 1.3 billion unique passwords and 3.2 billion emails.

In June 2025, approximately 4 billion YouTube comments were parsed across more than 1 million channels, covering 616 million unique users with nicknames, comment text, and dates.

In October 2015, the multiplayer game hacking site MPGH was breached — 3.1 million accounts with usernames, email, IPs, and salted MD5 passwords.

In October 2013, 153 million Adobe accounts were breached containing names, email, poorly encrypted passwords, and password hints.

In October 2016, Adult FriendFinder leaked names, SHA-1 password hashes, and ~170 million unique emails — following an earlier 2015 breach of ~4 million records.

In December 2016, a public dump of 458 million unique email/password pairs was used for credential stuffing and assessing novelty of other leaks.

Early 2025 dump allegedly from Russian public services covering ~180 million residents. Likely a compilation: names, phones, email, TIN, SNILS, passport, and address — often partially filled.

In June 2022, a list of 54 million Microsoft email/password pairs was published, compiled from many other leaks.

On May 17, 2022, Skolkovo business school data appeared in Telegram channels — names, phones, birth dates, workplaces, titles, and PBKDF2 password hashes for over a million records.