Naz.API
Disclosed Jan 17, 20242 years ago70,840,771 accountsUnverified
In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum . The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords.
What is known
| People affected | 70,840,771 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 17, 2024 |
| Happened | Sep 20, 2023 |
| Attack | Credential stuffing |
| Data exposed | Emails, Passwords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Naz.APIhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jan 17, 2024 | 70,840,771 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.