Naz.API data breach: 70.8M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2024-01-17
In September 2023, over 100GB of stealer logs and credential stuffing lists titled "Naz.API" was posted to a popular hacking forum. The incident contained a combination of email address and plain text password pairs alongside the service they were entered into, and standalone credential pairs obtained from unnamed sources. In total, the corpus of data included 71M unique email addresses and 100M unique passwords. Exposed data: email addresses, passwords. The breach dates from Sep 20, 2023; Have I Been Pwned loaded it on Jan 17, 2024.
What to do
- If you had a Naz.API account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch