Security Blog

Breach analysis, security insights, and practical tips to keep your data safe.

Mar 30, 2026 Breach Analysis

Collection #1: The 773 Million Email Mega-Dump That Fueled Credential Stuffing

In January 2019, a massive credential dump called \"Collection #1\" surfaced with 773 million unique email addresses and 21 million unique passwords, compiled from years of smaller breaches.

Read more
Mar 23, 2026 Breach Analysis

Adobe's 2013 Breach: 153 Million Passwords Encrypted the Wrong Way

Adobe encrypted 153 million passwords using 3DES-ECB instead of hashing them. The result was a breach so badly handled it became a crossword puzzle — literally. Here's why encryption mode matters.

Read more
Mar 16, 2026 Breach Analysis

T-Mobile's Repeated Breaches: A Pattern of Security Failures

T-Mobile has suffered major breaches in 2018, 2019, 2020, 2021, 2022, and 2023. With hundreds of millions of records exposed, the pattern reveals systemic security challenges at one of America's largest carriers.

Read more
Mar 9, 2026 Breach Analysis

Capital One: How a Cloud Misconfiguration Exposed 106 Million Records

A former AWS employee exploited a misconfigured web application firewall to steal the personal data of 106 million Capital One applicants and customers, including Social Security numbers and bank account numbers.

Read more
Mar 2, 2026 Breach Analysis

Marriott-Starwood: 500 Million Hotel Guests Had Their Data Stolen

Attackers spent four years inside the Starwood reservation system before Marriott discovered the breach. Passport numbers, credit cards, and travel histories of half a billion guests were exposed.

Read more
Feb 26, 2026 Breach Analysis

When Breaches Hit Billions: What XSS.IS and Collection #1 Teach Us

Nearly 19 billion records sit in breach databases worldwide. The largest single incident—XSS.IS Combolist with 2.47 billion credentials—reveals how password reuse transforms individual hacks into catastrophic exposure chains that threaten everyone.

Read more
Feb 23, 2026 Breach Analysis

Equifax: When a Credit Bureau Loses 147 Million Social Security Numbers

The 2017 Equifax breach exposed Social Security numbers, birth dates, and addresses for nearly half the U.S. population. This breach changed the conversation about corporate responsibility for personal data.

Read more
Feb 18, 2026 Breach Analysis

XSS.IS Combolist: Inside the 2.4 Billion Record Breach That Exposed Everything

With 2.47 billion records, the XSS.IS Combolist remains the largest credential exposure in history. Leaked in February 2019, it contained usernames, email addresses, and plaintext passwords—a master key to digital identities worldwide.

Read more
Feb 18, 2026 Breach Analysis

The Yahoo Breach: How 3 Billion Accounts Were Compromised

In the largest data breach ever recorded, Yahoo disclosed that all 3 billion of its user accounts were stolen. Here's what happened, why it matters, and what it teaches us about corporate cybersecurity.

Read more
Nov 13, 2016 Breach Analysis

LeakedSource Analysis of FriendFinder Networks Hack

Sexual secrets for hundreds of millions exposed in largest hack of 2016 November 13th, 2016 Quick links What happened? Who are we? Deleted Users Passwords Emails Languages Site Growth and Usage...

Read more
Oct 20, 2016 Breach Analysis

LeakedSource Analysis of Weebly.com Hack

Tens of millions of websites at risk in latest mega breach October 20th, 2016 Additionally we were just given the Adult Friend Finder data so once we verify it, we'll add that as well.

Read more
Oct 11, 2016 Breach Analysis

LeakedSource Analysis of Evony.com Hack

October 11th, 2016 33 Million gamer accounts stolen Surprisingly they also stored the passwords in unsalted SHA1 next to the MD5 which makes no sense but anyway, here is the top list of most...

Read more

LeakedSource Support

AI assistant — a human reviews escalated chats

This chat has been escalated to our support team — a human will reply here or by email. If you haven't shared your email yet, just type it here so we can reach you.
Hi! I'm the LeakedSource assistant. Ask me about scans, breaches, billing, or your account.