Particle.news
Download on the App Store
3 ARTICLES
·
last mo.

Have I Been Pwned Adds 183 Million Infostealer Credentials With Privacy-Restricted Search

To protect privacy tied to site URLs, Troy Hunt processed a Synthient dataset into unique accounts, with results available only through NotifyMe.

Image
Image

Overview

  • The dataset aggregates infostealer-harvested logins collected by Synthient in April 2025 and supplied to HIBP.
  • Hunt normalized and deduplicated billions of raw records, yielding 183 million unique account entries.
  • The records are searchable on HIBP by email, password, domain, or site, yet direct address lookups exclude these infostealer entries.
  • Affected users can receive disclosures via HIBP’s NotifyMe service, a policy set to avoid exposing sensitive site names present in the URLs.
  • With this addition, reporting places HIBP’s total searchable accounts at more than 15.3 billion.