Are You on the Pwnedlist?
Summary: Security researchers Alen Puzic and Jasiel Spelman of DVLabs, an HP/TippingPoint division, launched pwnedlist.com in 2011 to let users check whether an email address or username appeared in public data dumps. The site searches nearly five million emails and usernames, grows by about 40,000 compromised accounts each week, and stores only cryptographic hashes of the data, returning a binary yes or no rather than any password or breach source.
Why it matters: Puzic found roughly 30,000 usernames and passwords in about two hours of harvesting from Pastebin and torrent trackers, and the site's own operator reports attempts to plant malware or hack it about every other week - a reminder that the breach data circulating in 2011 was already measured in millions of accounts.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026