Record-breaking cache of stolen user data found

Security researchers have located a record-breaking cache of stolen user data on the dark web. The cache is made up of newly stolen data along with data aggregated from previous data breaches. The data includes stolen usernames, passwords, and personally identifiable information.

Dubbed the “Mother of all Breaches”, or “MOAB”, the cache is 12 terabytes (12,000 gigabytes) in size and contains around 26 billion records. The previously largest known breach data cache, found in 2021, contained only 3.2 billion records: 12% of the size of MOAB.

According to the team who found the cache, the consumer impact of the supermassive MOAB could be unprecedented. Since many people reuse usernames and passwords, cybercriminals could embark on a tidal wave of credential-stuffing attacks.

“If users use the same passwords for their Netflix account as they do for their Gmail account, attackers can use this to pivot towards other, more sensitive accounts. Apart from that, users whose data has been included in MOAB may become victims of spear-phishing attacks or receive high levels of spam emails,” the researchers said.

The size and scope of MOAB reinforces the need to immediately change any passwords involved in breaches. You can check if any of your accounts are breached using the Have I Been Pwned website.

Contact us