logo

Russian Cyber Criminal Named as Source of Massive Collection 1 Data Dump

ID: 85945493-8934-5c75-9a3b-3eb17df456e3

STIX ID: report--85945493-8934-5c75-9a3b-3eb17df456e3

Feed Name: Security Ledger

Threat Score
75/100

Date Published: 2019-02-04

Date Updated: 2026-04-26

Author: Paul Roberts

...
...

Recorded Future reports that a massive set of aggregated credentials—most notably "Collection 1" (≈773 million records) and several additional archives totaling up to billions of records—was being shared on Russian-language hacker forums; researchers observed a forum user, "C0rpz", as a likely originator, though confidence is rated medium. The collections largely comprise previously leaked credentials combined into large archives, and their broad availability raises significant risk of credential-stuffing and other automated account takeover attacks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.