logo

Have I Been Pwned adds 71 million emails from Naz.API stolen account list

ID: 7d98f8e5-105a-5536-89a9-839354304472

STIX ID: report--7d98f8e5-105a-5536-89a9-839354304472

Feed Name: Bleeping Computer

Threat Score
75/100

Date Published: 2024-01-17

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

Have I Been Pwned added the Naz.API credential dataset to its breach service after receiving it from a tech company; Naz.API is allegedly ~1 billion credential records (319 files, 104 GB) compiled from credential-stuffing lists and information-stealing malware logs, containing ~70.8 million unique email addresses. The dataset has circulated on hacking forums and fed OSINT/search services, increasing the risk of account takeover, doxxing, SIM-swaps, and crypto theft; users are advised to change passwords (including corporate and VPN accounts) and move cryptocurrency off potentially compromised wallets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.