Naz.API
Disclosed Jan 17, 202470,840,771 accountsUnverified
In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum . The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords.
What is known
| People affected | 70,840,771 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 17, 2024 |
| Happened | Sep 20, 2023 |
| Attack | Credential stuffing |
| Data exposed | EmailsPasswords |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.