Security News
Massive data breach: 2.7B credentials in circulation – check your passwords
Researchers have published a compiled mega-leak with 2.7 billion email/password combinations. Here is how to check if you are affected.
In late April 2026, a mega data package with 2.7 billion email/password combinations was released in relevant forums. It is a compilation of older leaks – but that makes it especially dangerous, because it is being used automatically for credential-stuffing attacks: trying the same password against hundreds of sites in parallel.
What to do
- Check your email at haveibeenpwned.com
- For every hit: change the password there immediately
- Use a unique password for every account – realistically only doable with a password manager
- Enable 2FA – then the leaked password alone is worthless