Have I Been Pwned adds 284M accounts stolen by infostealer malware

​The Have I Been Pwned data breach notification service has added over 284 million accounts stolen by information stealer malware and found on a Telegram channel. HIBP founder Troy Hunt says he found 284,132,969 compromised accounts while analyzing 1.5TB of stealer logs likely collected from numerous sources and shared on a Telegram channel known as “ALIEN TXTBASE.” "They contain 23 billion rows with 493 million unique website and email address pairs, affecting 284M unique email addresses," Hunt stated in a Tuesday blog. "We've also added 244M passwords we've never seen before to Pwned Passwords and updated the counts against another 199M that were already in there." Due to the large number of accounts in this collection, the data may also likely include both old and new credentials stolen through credential stuffing attacks and data breaches. Before adding the stolen accounts to HIBP's database, Troy confirmed their authenticity by checking if a password reset attempt using the s ... Read full article.