logo

That 16 Billion Password Story (AKA "Data Troll")

ID: 87e71a05-0b19-5427-9577-bde6fc780463

STIX ID: report--87e71a05-0b19-5427-9577-bde6fc780463

Feed Name: Troy Hunt – Security Blog

Threat Score
50/100

Date Published: 2025-08-13

Date Updated: 2026-04-19

Author: Troy Hunt

...
...

The author examines a widely reported "16 billion passwords" story and demonstrates the underlying corpus is composed of multiple infostealer logs: 2.7B rows -> 325M parseable log entries -> 109M unique email addresses (4.4M new to Have I Been Pwned) and 231M unique passwords, with the vast majority being duplicates or previously seen; the incident represents aggregated stolen credentials rather than a single fresh breach and poses reduced incremental risk compared with the sensational headlines.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.