UK govt shares 585 million passwords with Have I Been Pwned
FBI: State hackers exploiting new Zoho zero-day since October
Log4j vulnerability now used to install Dridex banking malware
T-Mobile says it blocked 21 billion scam calls this year
Garrett walk-through metal detectors can be remotely manipulated
Windows 10 21H2 adds ransomware protection to security baseline
Want to learn Python? This $20 bundle gets you started coding today
Fix your home Wi-Fi with this 4.3 Gbps mesh router, now just $245
Qualys BrowserCheck
Junkware Removal Tool
How to remove the PBlock+ adware browser extension
Remove the Search Redirect
Remove the Search Redirect
Remove the Search Redirect
Remove Security Tool and SecurityTool (Uninstall Guide)
How to remove Antivirus 2009 (Uninstall Instructions)
How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo
How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller
Locky Ransomware Information, Help Guide, and FAQ
CryptoLocker Ransomware Information Guide and FAQ
CryptorBit and HowDecrypt Information Guide and FAQ
CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ
How to make the Start menu full screen in Windows 10
How to install the Microsoft Visual C++ 2015 Runtime
How to open an elevated PowerShell Admin prompt in Windows 10
How to Translate a Web Page in Google Chrome
How to start Windows in Safe Mode
How to remove a Trojan, Virus, Worm, or other Malware
How to show hidden files in Windows 7
How to see hidden files in Windows
IT Certification Courses
Gear + Gadgets

The United Kingdom’s National Crime Agency has contributed more than 585 million passwords to the Have I Been Pwned service that lets users check if their login information has leaked online.
Just like with the passwords coming from the FBI, this massive collection has been added to the Pwned Passwords data that allows searching if a password has been compromised.
NCA’s password collection comes from the agency’s National Cyber Crime Unit (NCCU), gathered during investigations of cybersecurity incidents.
Troy Hunt, the creator of the Have I Been Pwned (HIBP) service, announced today that after importing and parsing the data from the NCA a set of 225,665,425 passwords were found to be completely new.
Even if less than half the NCA password collection was added to the live Pwned Passwords data, it still makes for a significant contribution, Hunt says in a blog post today.
“Now, keep in mind that before today’s announcement, there were already 613M of them in the live Pwned Passwords service (and many millions more in my local working copy waiting for the next release), so the NCA’s corpus represented a significant increase in size” – Troy Hunt
HIBP’s Pwned Passwords project lets law enforcement agencies in multiple countries add passwords found during investigations. Thus, other services using the Pwned Passwords API can protect their users against account takeover attacks.
The NCA told Hunt that the source of the passwords was a cloud storage location belonging to a UK business that unidentified actors were using to deposit compromised login data.
The investigators realized that the credentials came from multiple data breaches and that third parties could access them “to commit further fraud or cyber offences.”
With NCA’s recent contribution, the number of credentials in the Pwned Passwords service increased by 38%, to more than 847 million.
UK govt warns thousands of SMBs their online stores were hacked
UK Labour Party discloses data breach after ransomware attack
UK government transport website caught showing porn
US, UK warn of Iranian hackers exploiting Microsoft Exchange, Fortinet
Microsoft Defender for Windows is getting a massive overhaul
Not a member yet? Register Now
Microsoft warns of easy Windows domain takeover via Active Directory bugs
New stealthy DarkWatchman malware hides in the Windows Registry
To receive periodic updates and news from BleepingComputer, please use the form below.
Terms of Use Privacy PolicyEthics Statement
Copyright @ 2003 – 2021 Bleeping Computer® LLC – All Rights Reserved
Not a member yet? Register Now
Read our posting guidelinese to learn what content is prohibited.


You May Also Like

Bulletproof hosting founder imprisoned for helping cybercrime gangs

FBI seized $2.3M from affiliate of REvil, Gandcrab ransomware gangsEwDoor botnet targets…

Utah medical center hit by data breach affecting 582k patients

US indicts Iranian hackers for Proud Boys voter intimidation emailsWinamp prepares a…

CISA orders federal agencies to patch Log4Shell by December 24th

Microsoft December 2021 Patch Tuesday fixes 6 zero-days, 67 flawsBugs in billions…

New Android malware targets Netflix, Instagram, and Twitter users

HPE says hackers breached Aruba Central using stolen access keyFBI warns of…