Ukraine Nabs Suspect in 773M Password ‘Megabreach’
Summary: Ukraine's Security Service (SBU) detained a hacker known as Sanix, from the Ivano-Frankivsk region, in connection with the 2019 release of roughly 773 million stolen usernames and passwords labeled 'Collection #1.' KrebsOnSecurity had earlier determined the dump was years old and assembled from mostly public breaches, and Intel 471 reported Sanix was selling access to nearly four dozen universities and a compromised VPN account for the government of San Bernardino, California.
What you should know: The headline 'largest collection of stolen data in history' turned out to be recycled credentials, yet the same seller was separately offering remote access to dozens of universities and a California city government's VPN - the reused passwords behind those logins are the exposure that outlasts the headline.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026