logo

Inside the Massive Naz.API Credential Stuffing List

ID: ca9c5be4-0259-5367-9bab-abf1491c8c3c

STIX ID: report--ca9c5be4-0259-5367-9bab-abf1491c8c3c

Feed Name: DataBreaches.Net

Threat Score
70/100

Date Published: 2024-01-18

Date Updated: 2026-05-13

Author: Dissent

...
...

Troy Hunt investigates the 'Naz.API' credential-stuffing corpus — 319 files totaling 104GB and ~70,840,771 unique email addresses — noting 427,308 impacted Have I Been Pwned subscribers and that a tech company acted on a bug-bounty submission tied to the list; the dataset is statistically significant and poses a clear risk for credential stuffing attacks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.