Polish Credentials data breach: 1.2M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2023-05-30
In May 2023, a credential stuffing list of 6.3M Polish email address and password pairs appeared on a local forum. Likely obtained by malware running on victims' machines, each record included an email address and plain text password alongside the website the credentials were used on. The data included 1.2M unique email addresses. Exposed data: email addresses, passwords. The breach dates from May 29, 2023; Have I Been Pwned loaded it on May 30, 2023.
What to do
- If you had a Polish Credentials account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch