Every public data breach

47 disclosed this week · 26,367 on record

Polish Credentials

Disclosed May 30, 20231,204,870 accountsUnverified

In May 2023, a credential stuffing list of 6.3M Polish email address and password pairs appeared on a local forum . Likely obtained by malware running on victims' machines, each record included an email address and plain text password alongside the website the credentials were used on. The data included 1.2M unique email addresses.

What is known

People affected1,204,870 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMay 30, 2023
HappenedMay 29, 2023
AttackCredential stuffing
Data exposedEmailsPasswords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Polish Credentials