Every public data breach

44 disclosed this week · 26,355 on record

Naz.API

Disclosed Jan 17, 202470,840,771 accountsUnverified

In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum . The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords.

What is known

People affected70,840,771 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJan 17, 2024
HappenedSep 20, 2023
AttackCredential stuffing
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Naz.API