124M Passwords Exposed as Infostealer Malware Hits Millions of Devices

Have I Been Pwned added a massive infostealer dataset containing roughly 124 million unique passwords and 56 million unique email addresses harvested from malware-infected devices. The report highlights a shift toward endpoint-based credential theft (infostealers) that bypasses corporate breaches, increasing risk of account takeover; it directs users to check passwords and email addresses on Have I Been Pwned and to replace any matched passwords.