Preface
The 2013 Verizon Breach Report found that 76% of intrusions exploited weak or stolen credentials. The problem is apparent – password reuse. It’s been there for a long time and as sad as it is, it seems that we’re not moving away from passwords anytime soon. The Exploit.in data breach is one of the prime examples of this problem in the wild.
What is it?
The Exploit.in data breach does not originate from one particular website – rather, it is a compilation of data breaches. This is why the data set is so large – with duplicates the data set contains over 800 million records split across 111 files.
The data format is pretty simple: the breach data contains email addresses and passwords separated by a colon. The Exploit.in data breach does not utilize any kind of hashing algorithm – all passwords appear to be in plain text making the problem even worse: such data is very likely to be exploited in “credential stuffing” attacks. Such an attack is used to gain unauthorized access to user accounts through automated login requests directed at a web application. Credential stuffing is often considered one of the biggest threats aimed at web applications today due to the volume of credentials already available in the wild and also due to the fact that it can be so easily automated. Here’s a diagram depicting such an attack:
In its essence, credential stuffing is an attack where attackers use mass log in attempts to verify the validity of stolen credential lists.
Email addresses
As there are more than 800 million records in this data set, naturally there are hundreds of email domains used by the people affected by this data leak. Top 500 email domains used on Exploit.in can be seen below:
| # | Email Domain | Count | Country / Purpose |
|---|---|---|---|
| 1 | yahoo.com | 138,694,410 | Commercial / United States |
| 2 | hotmail.com | 108,288,333 | Commercial / United States |
| 3 | mail.ru | 97,647,063 | Russia |
| 4 | gmail.com | 71,224,306 | Commercial / United States |
| 5 | yandex.ru | 41,799,395 | Russia |
| 6 | rambler.ru | 26,534,464 | Russia |
| 7 | aol.com | 25,057,923 | Commercial / United States |
| 8 | hotmail.fr | 11,372,592 | France |
| 9 | bk.ru | 10,748,837 | Russia |
| 10 | web.de | 10,302,599 | Germany |
| 11 | gmx.de | 9,918,031 | Germany |
| 12 | list.ru | 9,880,436 | Russia |
| 13 | inbox.ru | 9,350,401 | Russia |
| 14 | yahoo.de | 7,353,964 | Germany |
| 15 | lycos.de | 6,815,315 | Germany |
| 16 | epost.de | 6,780,151 | Germany |
| 17 | yahoo.fr | 6,751,712 | France |
| 18 | msn.com | 6,518,503 | Commercial / United States |
| 19 | live.com | 6,315,697 | Commercial / United States |
| 20 | hotmail.co.uk | 5,533,502 | United Kingdom |
| 21 | yahoo.co.uk | 4,673,314 | United Kingdom |
| 22 | hotmail.it | 4,325,700 | Italy |
| 23 | seznam.cz | 3,768,390 | Czech Republic |
| 24 | aim.com | 3,518,770 | Commercial / United States |
| 25 | comcast.net | 3,293,900 | Network Infrastructure |
| 26 | qip.ru | 3,104,976 | Russia |
| 27 | libero.it | 2,769,173 | Italy |
| 28 | interia.pl | 2,618,794 | Poland |
| 29 | sbcglobal.net | 2,534,957 | Network Infrastructure |
| 30 | live.fr | 2,510,925 | France |
| 31 | ymail.com | 2,275,493 | Commercial / United States |
| 32 | myspace.com | 2,143,382 | Commercial / United States |
| 33 | hotmail.de | 2,046,264 | Germany |
| 34 | ukr.net | 1,991,618 | Network Infrastructure |
| 35 | yaho.de | 1,918,838 | Germany |
| 36 | wp.pl | 1,899,642 | Poland |
| 37 | YAHOO.COM | 1,890,253 | Commercial / United States |
| 38 | free.fr | 1,756,218 | France |
| 39 | bigmir.net | 1,665,687 | Network Infrastructure |
| 40 | hotmail.es | 1,423,706 | Spain |
| 41 | yahoo.it | 1,384,971 | Italy |
| 42 | orange.fr | 1,358,228 | France |
| 43 | mail.ua | 1,313,215 | Ukraine |
| 44 | verizon.net | 1,256,789 | Network Infrastructure |
| 45 | wanadoo.fr | 1,173,148 | France |
| 46 | live.it | 1,145,055 | Italy |
| 47 | rocketmail.com | 1,095,363 | Commercial / United States |
| 48 | bellsouth.net | 1,004,754 | Network Infrastructure |
| 49 | cox.net | 994,741 | Network Infrastructure |
| 50 | naver.com | 991,870 | Commercial / United States |
| 51 | yahoo.com.br | 975,631 | Brazil |
| 52 | yahoo.co.in | 961,833 | India |
| 53 | de.com | 924,198 | Commercial / United States |
| 54 | ya.ru | 918,170 | Russia |
| 55 | live.co.uk | 910,633 | United Kingdom |
| 56 | yahoo.es | 903,480 | Spain |
| 57 | rediffmail.com | 889,567 | Commercial / United States |
| 58 | googlemail.com | 881,466 | Commercial / United States |
| 59 | o2.pl | 821,385 | Poland |
| 60 | alice.it | 814,223 | Italy |
| 61 | btinternet.com | 814,193 | Commercial / United States |
| 62 | att.net | 760,492 | Network Infrastructure |
| 63 | yahoo.co.id | 716,579 | India |
| 64 | earthlink.net | 693,524 | Network Infrastructure |
| 65 | tiscali.it | 668,972 | Italy |
| 66 | freenet.de | 644,293 | Germany |
| 67 | gmx.net | 620,338 | Network Infrastructure |
| 68 | freemail.hu | 614,780 | Hungary |
| 69 | HOTMAIL.COM | 606,658 | Commercial / United States |
| 70 | charter.net | 571,103 | Network Infrastructure |
| 71 | t-online.de | 565,801 | Germany |
| 72 | yahoo.com.tw | 556,210 | Commercial / United States |
| 73 | 163.com | 526,577 | Commercial / United States |
| 74 | laposte.net | 526,374 | Network Infrastructure |
| 75 | abv.bg | 513,529 | Bulgaria |
| 76 | mail.com | 503,070 | Commercial / United States |
| 77 | yahoo.ca | 496,920 | Canada |
| 78 | virgilio.it | 488,983 | Italy |
| 79 | meta.ua | 487,238 | Ukraine |
| 80 | windowslive.com | 473,721 | Commercial / United States |
| 81 | qq.com | 454,857 | Commercial / United States |
| 82 | hotmail.ru | 454,323 | Russia |
| 83 | AOL.COM | 450,603 | Commercial / United States |
| 84 | hanmail.net | 448,630 | Network Infrastructure |
| 85 | live.nl | 437,837 | The Netherlands |
| 86 | gmx.at | 431,724 | Austria |
| 87 | live.de | 412,147 | Germany |
| 88 | facebook.com | 410,052 | Commercial / United States |
| 89 | ntlworld.com | 399,360 | Commercial / United States |
| 90 | netscape.net | 380,424 | Network Infrastructure |
| 91 | optonline.net | 369,716 | Network Infrastructure |
| 92 | op.pl | 368,088 | Poland |
| 93 | yahoo.com.ph | 363,382 | Commercial / United States |
| 94 | yahoo.com.au | 355,672 | Commercial / United States |
| 95 | 3a.by | 354,586 | Belarus |
| 96 | mac.com | 346,216 | Commercial / United States |
| 97 | yahoo.com.mx | 341,381 | Mexico |
| 98 | yahoo.com.my | 338,588 | Malaysia |
| 99 | tut.by | 337,088 | Belarus |
| 100 | juno.com | 335,265 | Commercial / United States |
| 101 | citromail.hu | 303,414 | Hungary |
| 102 | azet.sk | 299,676 | Slovakia |
| 103 | excite.com | 295,949 | Commercial / United States |
| 104 | yahoo.gr | 290,180 | Greece |
| 105 | outlook.com | 283,662 | Commercial / United States |
| 106 | pochta.ru | 283,200 | Russia |
| 107 | inbox.lv | 278,964 | Latvia |
| 108 | bigpond.com | 259,793 | Commercial / United States |
| 109 | centrum.cz | 259,587 | Czech Republic |
| 110 | live.com.au | 256,217 | Australia |
| 111 | me.com | 254,129 | Commercial / United States |
| 112 | netzero.com | 251,038 | Commercial / United States |
| 113 | peoplepc.com | 248,488 | Commercial / United States |
| 114 | gmail.ru | 243,371 | Russia |
| 115 | yahoo.com.ar | 243,048 | Commercial / United States |
| 116 | tiscali.co.uk | 240,404 | United Kingdom |
| 117 | neuf.fr | 235,252 | France |
| 118 | arcor.de | 232,641 | Germany |
| 119 | live.ca | 229,806 | Canada |
| 120 | yahoo.co.jp | 227,529 | Japan |
| 121 | sky.com | 227,327 | Commercial / United States |
| 122 | bol.com.br | 226,629 | Commercial / United States |
| 123 | 126.com | 218,028 | Commercial / United States |
| 124 | shaw.ca | 214,429 | Canada |
| 125 | bluewin.ch | 213,318 | Switzerland |
| 126 | adelphia.net | 213,024 | Network Infrastructure |
| 127 | live.com.mx | 211,576 | Mexico |
| 128 | voila.fr | 211,292 | France |
| 129 | blueyonder.co.uk | 210,964 | United Kingdom |
| 130 | mynet.com | 208,119 | Commercial / United States |
| 131 | sfr.fr | 207,249 | France |
| 132 | yandex.ua | 206,696 | Ukraine |
| 133 | yahoo.in | 204,367 | India |
| 134 | tlen.pl | 197,695 | Poland |
| 135 | yahoo.com.hk | 196,086 | Commercial / United States |
| 136 | email.it | 195,839 | Italy |
| 137 | nate.com | 195,230 | Commercial / United States |
| 138 | ig.com.br | 193,723 | Commercial / United States |
| 139 | tin.it | 193,583 | Italy |
| 140 | tmail.com | 189,727 | Commercial / United States |
| 141 | netzero.net | 189,011 | Network Infrastructure |
| 142 | email.cz | 188,577 | Czech Republic |
| 143 | sympatico.ca | 187,820 | Canada |
| 144 | rogers.com | 187,779 | Commercial / United States |
| 145 | gmx.com | 183,605 | Commercial / United States |
| 146 | hotmail.couk | 178,381 | United Kingdom |
| 147 | cs.com | 177,090 | Commercial / United States |
| 148 | vp.pl | 172,556 | Poland |
| 149 | yahoo.com.sg | 157,737 | Commercial / United States |
| 150 | lycos.com | 154,520 | Commercial / United States |
| 151 | myway.com | 154,497 | Commercial / United States |
| 152 | aliceadsl.fr | 154,401 | France |
| 153 | optusnet.com.au | 154,232 | Commercial / United States |
| 154 | e-mail.ru | 153,696 | Russia |
| 155 | live.se | 152,571 | Sweden |
| 156 | lenta.ru | 152,547 | Russia |
| 157 | Yahoo.com | 148,546 | Commercial / United States |
| 158 | poczta.onet.pl | 148,137 | Poland |
| 159 | walla.com | 148,131 | Commercial / United States |
| 160 | mchsi.com | 147,450 | Commercial / United States |
| 161 | live.com.pt | 144,877 | Portugal |
| 162 | uol.com.br | 143,101 | Commercial / United States |
| 163 | us.army.mil | 139,125 | Military |
| 164 | gmx.ch | 138,902 | Switzerland |
| 165 | comcast.com | 137,532 | Commercial / United States |
| 166 | yahoo.com.cn | 137,036 | China |
| 167 | live.be | 136,367 | Belgium |
| 168 | myrambler.ru | 136,225 | Russia |
| 169 | caramail.com | 135,622 | Commercial / United States |
| 170 | insightbb.com | 134,978 | Commercial / United States |
| 171 | email.com | 134,240 | Commercial / United States |
| 172 | sina.com | 134,152 | Commercial / United States |
| 173 | talktalk.net | 131,061 | Network Infrastructure |
| 174 | embarqmail.com | 130,576 | Commercial / United States |
| 175 | narod.ru | 129,613 | Russia |
| 176 | sapo.pt | 128,423 | Portugal |
| 177 | yahoo.com.vn | 127,188 | Commercial / United States |
| 178 | autorambler.ru | 127,063 | Russia |
| 179 | centrum.sk | 126,510 | Slovakia |
| 180 | gmail.co.uk | 126,088 | United Kingdom |
| 181 | windstream.net | 125,425 | Network Infrastructure |
| 182 | skynet.be | 124,719 | Belgium |
| 183 | mailinator.com | 124,446 | Commercial / United States |
| 184 | telenet.be | 122,941 | Belgium |
| 185 | fastwebnet.it | 120,884 | Italy |
| 186 | google.com | 120,871 | Commercial / United States |
| 187 | live.dk | 120,552 | Denmark |
| 188 | blackplanet.com | 119,300 | Commercial / United States |
| 189 | yahoo.couk | 119,036 | United Kingdom |
| 190 | terra.com.br | 118,690 | Commercial / United States |
| 191 | club-internet.fr | 112,725 | France |
| 192 | netscape.com | 110,789 | Commercial / United States |
| 193 | gmail.com.br | 110,609 | Commercial / United States |
| 194 | vkontakte.ru | 110,591 | Russia |
| 195 | ro.ru | 106,657 | Russia |
| 196 | poczta.fm | 105,337 | Radio Station |
| 197 | onet.eu | 104,538 | European Union |
| 198 | MYSPACE.COM | 104,123 | Commercial / United States |
| 199 | yaho.com | 103,955 | Commercial / United States |
| 200 | inwind.it | 103,356 | Italy |
| 201 | tampabay.rr.com | 103,103 | Commercial / United States |
| 202 | yndex.ru | 102,751 | Russia |
| 203 | e1.ru | 102,319 | Russia |
| 204 | online.de | 102,251 | Germany |
| 205 | GMAIL.COM | 102,229 | Commercial / United States |
| 206 | ngs.ru | 101,927 | Russia |
| 207 | yahoo.coin | 101,462 | India |
| 208 | roadrunner.com | 101,200 | Commercial / United States |
| 209 | telus.net | 101,190 | Network Infrastructure |
| 210 | frontiernet.net | 100,615 | Network Infrastructure |
| 211 | sibmail.com | 100,011 | Commercial / United States |
| 212 | email.ru | 99,832 | Russia |
| 213 | corp.badoo.com | 99,386 | Commercial / United States |
| 214 | gmail.com.tw | 98,259 | Commercial / United States |
| 215 | yahoo.com | 97,810 | Commercial / United States |
| 216 | spaces.ru | 96,332 | Russia |
| 217 | bigpond.net.au | 96,321 | Network Infrastructure |
| 218 | onet.pl | 94,105 | Poland |
| 219 | yahoo.coid | 93,451 | Indonesia |
| 220 | home.nl | 92,944 | The Netherlands |
| 221 | hotmail.com.br | 92,149 | Commercial / United States |
| 222 | ua.fm | 90,747 | Radio Station |
| 223 | fsmail.net | 90,650 | Network Infrastructure |
| 224 | Hotmail.com | 90,416 | Commercial / United States |
| 225 | cfl.rr.com | 88,019 | Commercial / United States |
| 226 | meil.ru | 87,936 | Russia |
| 227 | yahoo.net | 87,329 | Network Infrastructure |
| 228 | rock.com | 87,084 | Commercial / United States |
| 229 | mobile.badoo.com | 86,254 | Commercial / United States |
| 230 | yhaoo.com | 85,804 | Commercial / United States |
| 231 | km.ru | 85,743 | Russia |
| 232 | mai.ru | 85,299 | Russia |
| 233 | yhoo.com | 85,284 | Commercial / United States |
| 234 | cableone.net | 84,211 | Network Infrastructure |
| 235 | videotron.ca | 83,308 | Canada |
| 236 | xtra.co.nz | 82,823 | New Zealand |
| 237 | virgin.net | 82,797 | Network Infrastructure |
| 238 | yandex.com | 82,735 | Commercial / United States |
| 239 | icloud.com | 82,125 | Commercial / United States |
| 240 | nm.ru | 81,243 | Russia |
| 241 | indiatimes.com | 80,444 | Commercial / United States |
| 242 | live.ru | 79,310 | Russia |
| 243 | interia.eu | 79,209 | European Union |
| 244 | buziaczek.pl | 78,809 | Poland |
| 245 | hotmail.be | 78,668 | Belgium |
| 246 | net.hr | 77,714 | Croatia |
| 247 | hot.ee | 77,239 | Estonia |
| 248 | mindspring.com | 77,188 | Commercial / United States |
| 249 | inbox.com | 76,978 | Commercial / United States |
| 250 | hotmail.nl | 76,584 | The Netherlands |
| 251 | prodigy.net | 76,370 | Network Infrastructure |
| 252 | westpost.net | 75,717 | Network Infrastructure |
| 253 | btopenworld.com | 75,594 | Commercial / United States |
| 254 | terra.es | 75,348 | Spain |
| 255 | mail.bg | 74,204 | Bulgaria |
| 256 | yahoo.co.kr | 73,829 | South Korea |
| 257 | hotmai.com | 73,332 | Commercial / United States |
| 258 | one.lt | 72,849 | Lithuania |
| 259 | sify.com | 71,963 | Commercial / United States |
| 260 | live.com.ar | 71,545 | Commercial / United States |
| 261 | telia.com | 71,304 | Commercial / United States |
| 262 | eircom.net | 70,796 | Network Infrastructure |
| 263 | centurytel.net | 70,676 | Network Infrastructure |
| 264 | wmconnect.com | 70,304 | Commercial / United States |
| 265 | yahoomail.com | 69,958 | Commercial / United States |
| 266 | ovi.com | 68,890 | Commercial / United States |
| 267 | sifree.it | 68,454 | Italy |
| 268 | hotmail.ca | 67,166 | Canada |
| 269 | q.com | 66,671 | Commercial / United States |
| 270 | yopmail.com | 66,367 | Commercial / United States |
| 271 | bellsouth.com | 66,212 | Commercial / United States |
| 272 | planet.nl | 65,456 | The Netherlands |
| 273 | i.ua | 65,319 | Ukraine |
| 274 | r0.ru | 64,626 | Russia |
| 275 | mail.ru; | 64,614 | Russia |
| 276 | blendr.badoo.com | 64,534 | Commercial / United States |
| 277 | verizon.com | 64,425 | Commercial / United States |
| 278 | atlas.cz | 63,992 | Czech Republic |
| 279 | telefonica.net | 63,389 | Network Infrastructure |
| 280 | pacbell.net | 63,102 | Network Infrastructure |
| 281 | suddenlink.net | 63,068 | Network Infrastructure |
| 282 | alltel.net | 62,970 | Network Infrastructure |
| 283 | fuse.net | 61,777 | Network Infrastructure |
| 284 | aon.at | 61,248 | Austria |
| 285 | zoznam.sk | 60,193 | Slovakia |
| 286 | mail.ru;qwerty | 59,405 | Russia |
| 287 | yahoo.ie | 59,325 | Ireland |
| 288 | webmail.co.za | 58,967 | South Africa |
| 289 | badoo.com | 58,573 | Commercial / United States |
| 290 | katamail.com | 58,052 | Commercial / United States |
| 291 | LIVE.COM | 57,953 | Commercial / United States |
| 292 | pisem.net | 57,827 | Network Infrastructure |
| 293 | volny.cz | 56,868 | Czech Republic |
| 294 | MSN.COM | 56,370 | Commercial / United States |
| 295 | homail.com | 56,204 | Commercial / United States |
| 296 | AOL.com | 55,845 | Commercial / United States |
| 297 | nc.rr.com | 55,801 | Commercial / United States |
| 298 | online.no | 55,701 | Norway |
| 299 | tds.net | 55,506 | Network Infrastructure |
| 300 | Gmail.com | 55,451 | Commercial / United States |
| 301 | email.ua | 55,237 | Ukraine |
| 302 | sohu.com | 54,201 | Commercial / United States |
| 303 | hotmail.co | 54,186 | Colombia |
| 304 | mail.ry | 53,592 | Unknown |
| 305 | wowway.com | 53,539 | Commercial / United States |
| 306 | dodgit.com | 53,391 | Commercial / United States |
| 307 | e-mail.ua | 53,323 | Ukraine |
| 308 | usa.com | 53,312 | Commercial / United States |
| 309 | pookmail.com | 53,280 | Commercial / United States |
| 310 | hotmail.se | 52,965 | Sweden |
| 311 | hughes.net | 52,841 | Network Infrastructure |
| 312 | walla.co.il | 52,782 | Israel |
| 313 | hotmail.com.au | 52,358 | Commercial / United States |
| 314 | spambob.com | 52,212 | Commercial / United States |
| 315 | univision.com | 52,025 | Commercial / United States |
| 316 | trashymail.com | 51,985 | Commercial / United States |
| 317 | hotmail.co.jp | 51,735 | Japan |
| 318 | hetnet.nl | 51,428 | The Netherlands |
| 319 | interfree.it | 51,048 | Italy |
| 320 | wi.rr.com | 50,756 | Commercial / United States |
| 321 | aol.co.uk | 50,736 | United Kingdom |
| 322 | home.com | 50,722 | Commercial / United States |
| 323 | yahoo.cn | 50,660 | China |
| 324 | hotmail.co.th | 50,560 | Thailand |
| 325 | hotmail.com.ar | 50,321 | Commercial / United States |
| 326 | chello.nl | 49,870 | The Netherlands |
| 327 | sms.at | 49,820 | Austria |
| 328 | live.at | 49,765 | Austria |
| 329 | hotmail.com.tr | 49,309 | Commercial / United States |
| 330 | hotmail.gr | 49,242 | Greece |
| 331 | online.ua | 49,225 | Ukraine |
| 332 | AIM.COM | 49,184 | Commercial / United States |
| 333 | btconnect.com | 49,072 | Commercial / United States |
| 334 | sbcglobal.com | 48,756 | Commercial / United States |
| 335 | ameritech.net | 48,340 | Network Infrastructure |
| 336 | carolina.rr.com | 47,196 | Commercial / United States |
| 337 | tesco.net | 47,116 | Network Infrastructure |
| 338 | sprintpcs.com | 46,946 | Commercial / United States |
| 339 | live.cl | 46,701 | Chile |
| 340 | luukku.com | 46,641 | Commercial / United States |
| 341 | mai1www.shootgardening.co.uk.h0st | 46,126 | United Kingdom |
| 342 | yahoo.dk | 46,123 | Denmark |
| 343 | yahoo.comph | 45,953 | Commercial / United States |
| 344 | gala.net | 45,913 | Network Infrastructure |
| 345 | post.sk | 45,565 | Slovakia |
| 346 | yahoo.se | 45,551 | Sweden |
| 347 | yahooo.com | 45,527 | Commercial / United States |
| 348 | yaoo.com | 45,519 | Commercial / United States |
| 349 | rediff.com | 45,486 | Commercial / United States |
| 350 | tonline.de | 44,720 | Germany |
| 351 | bbox.fr | 44,352 | France |
| 352 | rochester.rr.com | 44,302 | Commercial / United States |
| 353 | cogeco.ca | 44,301 | Canada |
| 354 | front.ru | 44,227 | Russia |
| 355 | spray.se | 43,887 | Sweden |
| 356 | telkomsa.net | 43,630 | Network Infrastructure |
| 357 | gazeta.pl | 43,564 | Poland |
| 358 | webtv.net | 43,329 | Network Infrastructure |
| 359 | yahho.com | 43,168 | Commercial / United States |
| 360 | iol.pt | 43,097 | Portugal |
| 361 | zoominternet.net | 42,969 | Network Infrastructure |
| 362 | yahool.com | 42,850 | Commercial / United States |
| 363 | gmx.fr | 42,767 | France |
| 364 | hotmail.com.tw | 42,131 | Commercial / United States |
| 365 | talk21.com | 42,036 | Commercial / United States |
| 366 | gamil.com | 42,016 | Commercial / United States |
| 367 | tom.com | 41,783 | Commercial / United States |
| 368 | hotmail.ch | 41,717 | Switzerland |
| 369 | hotbox.ru | 41,695 | Russia |
| 370 | in.com | 41,438 | Commercial / United States |
| 371 | triad.rr.com | 41,432 | Commercial / United States |
| 372 | live.no | 41,262 | Norway |
| 373 | cegetel.net | 41,254 | Network Infrastructure |
| 374 | prodigy.net.mx | 41,096 | Mexico |
| 375 | hotmail.net | 41,033 | Network Infrastructure |
| 376 | yahoo.co.nz | 40,994 | New Zealand |
| 377 | numericable.fr | 40,986 | France |
| 378 | rcn.com | 40,783 | Commercial / United States |
| 379 | hotmial.com | 40,212 | Commercial / United States |
| 380 | i.softbank.jp | 40,192 | Japan |
| 381 | ptd.net | 40,100 | Network Infrastructure |
| 382 | hotmal.com | 40,093 | Commercial / United States |
| 383 | gadball.com | 39,987 | Commercial / United States |
| 384 | swbell.net | 39,384 | Network Infrastructure |
| 385 | tele2.it | 39,213 | Italy |
| 386 | land.ru | 39,047 | Russia |
| 387 | y7mail.com | 38,877 | Commercial / United States |
| 388 | latinmail.com | 38,842 | Commercial / United States |
| 389 | nycap.rr.com | 38,544 | Commercial / United States |
| 390 | aol.de | 38,481 | Germany |
| 391 | amorki.pl | 38,347 | Poland |
| 392 | austin.rr.com | 38,234 | Commercial / United States |
| 393 | earthlink.com | 38,194 | Commercial / United States |
| 394 | woh.rr.com | 38,126 | Commercial / United States |
| 395 | live.ie | 38,089 | Ireland |
| 396 | ol.com | 37,950 | Commercial / United States |
| 397 | microsoft.com | 37,918 | Commercial / United States |
| 398 | bigpond.com.au | 37,889 | Commercial / United States |
| 399 | twcny.rr.com | 37,357 | Commercial / United States |
| 400 | hotmil.com | 37,248 | Commercial / United States |
| 401 | yahoo.co | 37,127 | Colombia |
| 402 | clearwire.net | 36,954 | Network Infrastructure |
| 403 | aol.net | 36,933 | Network Infrastructure |
| 404 | oi.com.br | 36,873 | Commercial / United States |
| 405 | tiscalinet.it | 36,726 | Italy |
| 406 | noos.fr | 36,396 | France |
| 407 | gmail.com.au | 36,299 | Commercial / United States |
| 408 | vipmail.hu | 36,101 | Hungary |
| 409 | mailcity.com | 35,915 | Commercial / United States |
| 410 | one.lv | 35,888 | Latvia |
| 411 | neo.rr.com | 35,766 | Commercial / United States |
| 412 | satx.rr.com | 35,755 | Commercial / United States |
| 413 | mweb.co.za | 35,516 | South Africa |
| 414 | msa.hinet.net | 35,465 | Network Infrastructure |
| 415 | hawaii.rr.com | 35,007 | Commercial / United States |
| 416 | iinet.net.au | 34,825 | Network Infrastructure |
| 417 | supereva.it | 34,731 | Italy |
| 418 | hushmail.com | 34,724 | Commercial / United States |
| 419 | COMCAST.NET | 34,695 | Network Infrastructure |
| 420 | columbus.rr.com | 34,664 | Commercial / United States |
| 421 | kc.rr.com | 34,600 | Commercial / United States |
| 422 | live.cn | 34,537 | China |
| 423 | fromru.com | 34,518 | Commercial / United States |
| 424 | netcabo.pt | 34,431 | Portugal |
| 425 | docomo.ne.jp | 34,307 | Japan |
| 426 | att.com | 34,291 | Commercial / United States |
| 427 | ezweb.ne.jp | 33,884 | Japan |
| 428 | cinci.rr.com | 33,820 | Commercial / United States |
| 429 | mail.dk | 33,813 | Denmark |
| 430 | otenet.gr | 33,644 | Greece |
| 431 | houston.rr.com | 33,638 | Commercial / United States |
| 432 | breakthru.com | 33,127 | Commercial / United States |
| 433 | chello.at | 33,124 | Austria |
| 434 | tpg.com.au | 32,606 | Commercial / United States |
| 435 | il.ru | 32,541 | Russia |
| 436 | daum.net | 32,426 | Network Infrastructure |
| 437 | autograf.pl | 32,409 | Poland |
| 438 | example.com | 32,160 | Commercial / United States |
| 439 | pandora.be | 32,078 | Belgium |
| 440 | sc.rr.com | 31,954 | Commercial / United States |
| 441 | hojmail.com | 31,889 | Commercial / United States |
| 442 | worldnet.att.net | 31,729 | Austria |
| 443 | yeah.net | 31,714 | Network Infrastructure |
| 444 | okdc.com | 31,514 | Commercial / United States |
| 445 | t-online.hu | 31,383 | Hungary |
| 446 | fteenet.de | 31,342 | Germany |
| 447 | bresnan.net | 31,278 | Network Infrastructure |
| 448 | yahoo.pl | 31,269 | Poland |
| 449 | globo.com | 31,227 | Commercial / United States |
| 450 | knology.net | 31,108 | Network Infrastructure |
| 451 | datingeurope.net | 30,948 | Network Infrastructure |
| 452 | ofir.dk | 30,947 | Denmark |
| 453 | gawab.com | 30,500 | Commercial / United States |
| 454 | aliceposta.it | 30,474 | Italy |
| 455 | iprimus.com.au | 30,438 | Commercial / United States |
| 456 | zonnet.nl | 30,413 | The Netherlands |
| 457 | tiscali.fr | 30,373 | France |
| 458 | voliacable.com | 30,365 | Commercial / United States |
| 459 | SBCGLOBAL.NET | 30,311 | Network Infrastructure |
| 460 | wanadoo.nl | 30,303 | The Netherlands |
| 461 | xs4all.nl | 30,212 | The Netherlands |
| 462 | tiscali.cz | 30,010 | Czech Republic |
| 463 | vodamail.co.za | 29,969 | South Africa |
| 464 | hotamil.com | 29,589 | Commercial / United States |
| 465 | ono.com | 29,519 | Commercial / United States |
| 466 | snet.net | 29,505 | Network Infrastructure |
| 467 | mail.by | 29,395 | Belarus |
| 468 | go2.pl | 29,220 | Poland |
| 469 | 21cn.com | 29,217 | Commercial / United States |
| 470 | gmai.com | 29,159 | Commercial / United States |
| 471 | usa.net | 29,109 | Network Infrastructure |
| 472 | msu.edu | 29,023 | Education |
| 473 | YMAIL.COM | 28,954 | Commercial / United States |
| 474 | o2.co.uk | 28,307 | United Kingdom |
| 475 | frontier.com | 28,039 | Commercial / United States |
| 476 | ziggo.nl | 27,926 | The Netherlands |
| 477 | HOTMAIL.CO.UK | 27,756 | United Kingdom |
| 478 | libertysurf.fr | 27,731 | France |
| 479 | nyc.rr.com | 27,667 | Commercial / United States |
| 480 | aport.ru | 27,492 | Russia |
| 481 | nextmail.ru | 27,329 | Russia |
| 482 | westnet.com.au | 27,099 | Commercial / United States |
| 483 | murambler.ru | 26,812 | Russia |
| 484 | tx.rr.com | 26,757 | Commercial / United States |
| 485 | cox.com | 26,728 | Commercial / United States |
| 486 | casema.nl | 26,556 | The Netherlands |
| 487 | vipmail.net | 26,514 | Network Infrastructure |
| 488 | mailcatch.com | 26,238 | Commercial / United States |
| 489 | yahoo.no | 26,127 | Norway |
| 490 | paran.com | 26,086 | Commercial / United States |
| 491 | mil.ru | 25,935 | Russia |
| 492 | wildblue.net | 25,914 | Network Infrastructure |
| 493 | plasa.com | 25,885 | Commercial / United States |
| 494 | mal.ru | 25,842 | Russia |
| 495 | lycos.co.uk | 25,818 | United Kingdom |
| 496 | tele2.fr | 25,816 | France |
| 497 | mocospace.com | 25,737 | Commercial / United States |
| 498 | yahoo.combr | 25,536 | Brazil |
| 499 | ibest.com.br | 25,465 | Brazil |
| 500 | attbi.com | 25,263 | Commercial / United States |
In this data set, there were 46 countries that were associated with email domains. 5 of email domains had a different purpose – they were associated with education, military or had unknown sources.
| Purpose / Country | Total Users |
|---|---|
| Commercial / United States | 389,842,845 |
| Russia | 203,283,285 |
| Germany | 47,206,838 |
| France | 26,092,163 |
| Network Infrastructure | 20,099,487 |
| Italy | 12,471,385 |
| United Kingdom | 12,171,065 |
| Poland | 6,574,020 |
| Czech Republic | 4,367,424 |
| Spain | 2,402,534 |
| Ukraine | 2,230,253 |
| Brazil | 1,948,406 |
| India | 1,779,874 |
| Canada | 1,323,750 |
| Hungary | 985,678 |
| The Netherlands | 919,529 |
| Belarus | 721,069 |
| Austria | 657,410 |
| Mexico | 594,053 |
| Bulgaria | 587,733 |
| Slovakia | 531,944 |
| Belgium | 494,773 |
| Switzerland | 393,937 |
| Japan | 387,647 |
| Greece | 373,066 |
| Portugal | 350,828 |
| Malaysia | 338,588 |
| Latvia | 314,852 |
| Sweden | 294,974 |
| Australia | 256,217 |
| Denmark | 231,435 |
| China | 222,233 |
| Radio Station | 196,084 |
| European Union | 183,747 |
| Military | 139,125 |
| South Africa | 124,452 |
| New Zealand | 123,817 |
| Norway | 123,090 |
| Ireland | 97,414 |
| Indonesia | 93,451 |
| Colombia | 91,313 |
| Croatia | 77,714 |
| Estonia | 77,239 |
| South Korea | 73,829 |
| Lithuania | 72,849 |
| Unknown | 53,592 |
| Israel | 52,782 |
| Thailand | 50,560 |
| Chile | 46,701 |
| Education | 29,023 |
Here’s an analysis of email addresses beginning with letters:
| # | Letter an email address begins with | Count of email addresses |
|---|---|---|
| 1 | a | 66,282,184 |
| 2 | b | 41,992,886 |
| 3 | c | 40,495,010 |
| 4 | d | 43,467,366 |
| 5 | e | 24,495,700 |
| 6 | f | 21,242,665 |
| 7 | g | 26,666,615 |
| 8 | h | 18,603,990 |
| 9 | i | 17,957,738 |
| 10 | j | 40,112,129 |
| 11 | k | 37,185,070 |
| 12 | l | 37,403,305 |
| 13 | m | 66,743,130 |
| 14 | n | 26,097,528 |
| 15 | o | 12,142,966 |
| 16 | p | 30,715,335 |
| 17 | q | 2,395,084 |
| 18 | r | 33,686,033 |
| 19 | s | 70,523,391 |
| 20 | t | 33,470,428 |
| 21 | u | 4,667,539 |
| 22 | v | 19,531,957 |
| 23 | w | 15,124,255 |
| 24 | x | 4,880,863 |
| 25 | y | 9,097,645 |
| 26 | z | 8,639,636 |
Here’s an analysis of email addresses beginning with numbers:
| Number an email address begins with | Count of email addresses |
|---|---|
| 0 | 812,738 |
| 1 | 3,410,408 |
| 2 | 1,522,406 |
| 3 | 1,040,831 |
| 4 | 825,370 |
| 5 | 662,828 |
| 6 | 629,154 |
| 7 | 1,474,854 |
| 8 | 772,510 |
| 9 | 693,145 |
In this data breach, there are:
- 5,429 email addresses consisting of 0 characters in length;
- 4,980 email addresses consisting of 1 characters in length;
- 2,038 email addresses consisting of 2 characters in length;
- 14,644 email addresses consisting of 3 characters in length;
- 194,429 email addresses consisting of 4 characters in length;
- 16,462,822 email addresses consisting of 5 characters in length;
- 29,792,114 email addresses consisting of 6 characters in length;
- 165,972,861 email addresses consisting of 7 characters in length;
- 56,302,118 email addresses consisting of 8 characters in length;
- 274,633,133 email addresses consisting of 9 characters in length;
- 64,442,280 email addresses consisting of 10 characters in length;
- 4,911,355 email addresses consisting of 15 characters in length;
- 1,731,936 email addresses consisting of 20 characters in length;
- 334,040 email addresses consisting of 25 characters in length;
- 45,651 email addresses consisting of 30 characters in length;
- 6,582 email addresses consisting of 35 characters in length;
- 1,311 email addresses consisting of 40 characters in length;
- 1,260 email addresses consisting of 45 characters in length;
- 364 email addresses consisting of 50 characters in length.
Most email addresses consist either of 9 or of 7 characters in length – in total, there are 440,605,994 such email addresses in this data breach. That means that 54.93615476398986% of users in this data breach used such email addresses.
Passwords
The top 500 passwords used in the Exploit.in data breach can be seen below:
| # | Password | Count |
|---|---|---|
| 1 | 9,394,973 | |
| 2 | 123456 | 5,021,150 |
| 3 | 123456789 | 1,846,744 |
| 4 | qwerty | 1,348,258 |
| 5 | password | 1,013,304 |
| 6 | 823,741 | |
| 7 | 12345678 | 762,590 |
| 8 | abc123 | 761,558 |
| 9 | 111111 | 717,537 |
| 10 | password1 | 689,459 |
| 11 | 1234567 | 663,952 |
| 12 | 1234567890 | 635,681 |
| 13 | 123123 | 577,044 |
| 14 | 12345 | 571,052 |
| 15 | 000000 | 512,949 |
| 16 | 1q2w3e4r5t | 502,213 |
| 17 | iloveyou | 420,894 |
| 18 | qwertyuiop | 358,704 |
| 19 | 1234 | 333,871 |
| 20 | dragon | 300,340 |
| 21 | monkey | 298,395 |
| 22 | 123456a | 257,989 |
| 23 | 123321 | 255,627 |
| 24 | 1qaz2wsx | 244,652 |
| 25 | 654321 | 230,337 |
| 26 | 666666 | 229,491 |
| 27 | 123qwe | 227,036 |
| 28 | myspace1 | 211,332 |
| 29 | target123 | 205,930 |
| 30 | tinkle | 205,419 |
| 31 | 121212 | 205,296 |
| 32 | 1q2w3e4r | 203,926 |
| 33 | 7777777 | 203,185 |
| 34 | 1g2w3e4r | 201,371 |
| 35 | gwerty | 201,269 |
| 36 | zag12wsx | 201,062 |
| 37 | gwerty123 | 200,969 |
| 38 | qwe123 | 194,053 |
| 39 | zxcvbnm | 187,142 |
| 40 | qwerty123 | 175,965 |
| 41 | 1q2w3e | 172,074 |
| 42 | qazwsx | 170,280 |
| 43 | 123 | 169,770 |
| 44 | 222222 | 167,009 |
| 45 | 555555 | 166,135 |
| 46 | 123abc | 162,971 |
| 47 | asdfghjkl | 159,926 |
| 48 | 987654321 | 156,994 |
| 49 | a123456 | 152,732 |
| 50 | qwerty1 | 151,323 |
| 51 | fuckyou | 148,720 |
| 52 | 123123123 | 145,730 |
| 53 | 112233 | 138,860 |
| 54 | 1234qwer | 136,772 |
| 55 | 159753 | 134,185 |
| 56 | computer | 131,351 |
| 57 | Status | 118,626 |
| 58 | 789456123 | 118,620 |
| 59 | gfhjkm | 113,502 |
| 60 | 777777 | 111,727 |
| 61 | 11111 | 111,568 |
| 62 | princess | 110,329 |
| 63 | iloveyou1 | 108,330 |
| 64 | 12qwaszx | 105,841 |
| 65 | ashley | 104,546 |
| 66 | asdfgh | 103,894 |
| 67 | asdf | 101,219 |
| 68 | samsung | 100,779 |
| 69 | 12345a | 100,684 |
| 70 | fuckyou1 | 100,174 |
| 71 | princess1 | 100,114 |
| 72 | michael | 98,917 |
| 73 | football | 97,233 |
| 74 | azerty | 95,686 |
| 75 | 123654 | 95,124 |
| 76 | sunshine | 94,994 |
| 77 | 123456789a | 94,421 |
| 78 | qwert | 93,148 |
| 79 | qwer1234 | 90,981 |
| 80 | football1 | 90,966 |
| 81 | daniel | 90,360 |
| 82 | 999999 | 89,054 |
| 83 | zxcvbn | 88,298 |
| 84 | aaaaaa | 84,902 |
| 85 | q1w2e3r4 | 84,764 |
| 86 | abcd1234 | 84,419 |
| 87 | master | 83,802 |
| 88 | 123456q | 83,111 |
| 89 | superman | 83,085 |
| 90 | monkey1 | 82,814 |
| 91 | a12345 | 82,089 |
| 92 | jessica | 81,594 |
| 93 | jordan23 | 81,471 |
| 94 | 11111111 | 81,014 |
| 95 | shadow | 80,257 |
| 96 | blink182 | 79,911 |
| 97 | asd123 | 78,540 |
| 98 | parola | 78,233 |
| 99 | love123 | 78,199 |
| 100 | qazwsxedc | 78,087 |
| 101 | asdasd | 77,806 |
| 102 | babygirl1 | 77,500 |
| 103 | 131313 | 77,113 |
| 104 | 88888888 | 76,414 |
| 105 | jesus1 | 76,183 |
| 106 | michael1 | 75,953 |
| 107 | killer | 75,912 |
| 108 | 333333 | 75,163 |
| 109 | charlie | 73,310 |
| 110 | marina | 72,616 |
| 111 | apple | 72,607 |
| 112 | 789456 | 72,596 |
| 113 | love | 72,509 |
| 114 | qweqwe | 71,828 |
| 115 | baseball | 71,535 |
| 116 | soccer | 71,339 |
| 117 | 987654 | 70,993 |
| 118 | golfer | 70,734 |
| 119 | 888888 | 70,082 |
| 120 | q1w2e3r4t5y6 | 70,071 |
| 121 | abc | 69,933 |
| 122 | 159357 | 69,279 |
| 123 | jordan | 69,273 |
| 124 | 3rJs1la7qE | 69,079 |
| 125 | thomas | 68,182 |
| 126 | ! | 68,179 |
| 127 | qweasdzxc | 67,832 |
| 128 | liverpool | 67,617 |
| 129 | ghbdtn | 67,456 |
| 130 | naruto | 67,370 |
| 131 | hello1 | 66,638 |
| 132 | 1111111 | 66,583 |
| 133 | angel1 | 66,455 |
| 134 | 12345q | 66,179 |
| 135 | 666 | 66,046 |
| 136 | iloveyou2 | 65,300 |
| 137 | nicole | 65,268 |
| 138 | michelle | 65,238 |
| 139 | q1w2e3 | 65,077 |
| 140 | 1111 | 64,573 |
| 141 | 147258369 | 63,785 |
| 142 | VQsaBLPzLa | 63,617 |
| 143 | 0987654321 | 62,990 |
| 144 | ?????????????????? | 62,947 |
| 145 | jessica1 | 62,622 |
| 146 | bitch1 | 61,928 |
| 147 | 102030 | 61,924 |
| 148 | 12345qwert | 61,762 |
| 149 | 0123456789 | 61,294 |
| 150 | andrew | 61,271 |
| 151 | nikita | 60,811 |
| 152 | cjmasterinf | 60,764 |
| 153 | 1111111111 | 60,560 |
| 154 | jennifer | 60,145 |
| 155 | user | 60,074 |
| 156 | 1342 | 59,043 |
| 157 | fuckyou2 | 58,911 |
| 158 | 010203 | 58,678 |
| 159 | qweasd | 58,678 |
| 160 | 290966 | 58,518 |
| 161 | hello | 58,509 |
| 162 | trustno1 | 58,395 |
| 163 | anthony1 | 58,297 |
| 164 | wall.e | 58,247 |
| 165 | 12413 | 58,173 |
| 166 | tudelft | 58,158 |
| 167 | DIOSESFIEL | 58,153 |
| 168 | PE#5GZ29PTZMSE | 58,136 |
| 169 | dpbk1234 | 58,087 |
| 170 | U38fa39 | 58,064 |
| 171 | charlie1 | 58,051 |
| 172 | 101010 | 58,048 |
| 173 | q1w2e3r4t5 | 57,803 |
| 174 | secret | 57,765 |
| 175 | joshua | 57,328 |
| 176 | money1 | 57,044 |
| 177 | andrea | 56,936 |
| 178 | anthony | 56,906 |
| 179 | passw0rd | 56,827 |
| 180 | qwertyu | 56,761 |
| 181 | 1qazxsw2 | 56,526 |
| 182 | soccer1 | 56,196 |
| 183 | 29rsavoy | 55,991 |
| 184 | superman1 | 55,943 |
| 185 | welcome | 55,769 |
| 186 | asdasd5 | 55,681 |
| 187 | 12344321 | 55,670 |
| 188 | baseball1 | 55,604 |
| 189 | 55,489 | |
| 190 | internet | 55,449 |
| 191 | robert | 55,339 |
| 192 | 212121 | 55,331 |
| 193 | tigger | 55,021 |
| 194 | number1 | 54,910 |
| 195 | hunter | 54,644 |
| 196 | lovely | 54,596 |
| 197 | pokemon | 54,537 |
| 198 | 12341234 | 54,482 |
| 199 | $HEX | 54,050 |
| 200 | asdf1234 | 54,041 |
| 201 | freedom | 53,250 |
| 202 | 1234561 | 53,169 |
| 203 | sunshine1 | 53,111 |
| 204 | justin | 52,313 |
| 205 | george | 51,617 |
| 206 | asshole1 | 51,437 |
| 207 | 147258 | 51,172 |
| 208 | letmein | 51,005 |
| 209 | 50cent | 50,982 |
| 210 | 696969 | 50,941 |
| 211 | !~!1 | 50,884 |
| 212 | ashley1 | 50,820 |
| 213 | qwaszx | 50,552 |
| 214 | forever | 50,353 |
| 215 | buster | 50,319 |
| 216 | amanda | 50,012 |
| 217 | 1 | 49,892 |
| 218 | chelsea | 49,784 |
| 219 | natasha | 49,579 |
| 220 | summer | 49,345 |
| 221 | purple | 49,297 |
| 222 | alexander | 49,001 |
| 223 | chocolate | 48,936 |
| 224 | pakistan | 48,745 |
| 225 | password2 | 48,744 |
| 226 | friends | 48,719 |
| 227 | jordan1 | 48,427 |
| 228 | matrix | 48,396 |
| 229 | password12 | 48,385 |
| 230 | lol123 | 48,204 |
| 231 | william | 48,145 |
| 232 | martin | 48,016 |
| 233 | hello123 | 47,971 |
| 234 | 232323 | 47,749 |
| 235 | mother | 47,642 |
| 236 | matthew | 47,641 |
| 237 | xbox360 | 47,610 |
| 238 | mustang | 47,580 |
| 239 | hannah | 47,512 |
| 240 | samantha | 47,236 |
| 241 | shadow1 | 47,219 |
| 242 | flower | 47,192 |
| 243 | 00000000 | 47,140 |
| 244 | eminem | 46,331 |
| 245 | Exigent | 46,307 |
| 246 | batman | 46,104 |
| 247 | nicole1 | 46,089 |
| 248 | butterfly | 46,080 |
| 249 | qqqqqq | 46,038 |
| 250 | maggie | 46,017 |
| 251 | liverpool1 | 45,788 |
| 252 | chris1 | 45,473 |
| 253 | london | 45,408 |
| 254 | adidas | 45,187 |
| 255 | babygirl | 45,132 |
| 256 | sergey | 45,051 |
| 257 | 147852 | 44,795 |
| 258 | brandon1 | 44,795 |
| 259 | arsenal | 44,487 |
| 260 | basketball | 44,378 |
| 261 | 1q2w3e4r5t6y | 44,311 |
| 262 | angel | 44,265 |
| 263 | loveme | 44,207 |
| 264 | startfinding | 44,069 |
| 265 | Sojdlg123aljg | 43,829 |
| 266 | 1234554321 | 43,728 |
| 267 | loveyou | 43,675 |
| 268 | whatever | 43,558 |
| 269 | mercedes | 43,482 |
| 270 | patrick | 43,447 |
| 271 | orange | 43,427 |
| 272 | harley | 43,355 |
| 273 | pepper | 43,040 |
| 274 | NULL | 43,025 |
| 275 | 55555 | 42,832 |
| 276 | iloveu | 42,735 |
| 277 | sandra | 42,724 |
| 278 | love12 | 42,701 |
| 279 | dragon1 | 42,640 |
| 280 | junior | 42,523 |
| 281 | starwars | 42,335 |
| 282 | 0000 | 41,997 |
| 283 | 1qaz2wsx3edc | 41,954 |
| 284 | qwerty12345 | 41,844 |
| 285 | joseph | 41,803 |
| 286 | qazxsw | 41,738 |
| 287 | 4815162342 | 41,711 |
| 288 | qwerty12 | 41,575 |
| 289 | barcelona | 41,550 |
| 290 | a123456789 | 41,532 |
| 291 | cookie | 41,446 |
| 292 | 123654789 | 41,191 |
| 293 | computer1 | 41,160 |
| 294 | jasmine | 41,144 |
| 295 | 444444 | 41,105 |
| 296 | happy1 | 41,062 |
| 297 | family | 40,937 |
| 298 | jonathan | 40,872 |
| 299 | melissa | 40,809 |
| 300 | matthew1 | 40,685 |
| 301 | qwertyui | 40,618 |
| 302 | ginger | 40,519 |
| 303 | william1 | 40,503 |
| 304 | 123456789q | 40,489 |
| 305 | snoopy | 40,442 |
| 306 | zaq12wsx | 40,309 |
| 307 | michelle1 | 40,291 |
| 308 | sophie | 40,258 |
| 309 | 1234567891 | 40,252 |
| 310 | 123789 | 40,160 |
| 311 | amanda1 | 40,017 |
| 312 | antonio | 39,950 |
| 313 | paSSword | 39,864 |
| 314 | mickey | 39,718 |
| 315 | victoria | 39,548 |
| 316 | 252525 | 39,545 |
| 317 | 111222 | 39,463 |
| 318 | taylor | 39,420 |
| 319 | daniel1 | 39,342 |
| 320 | diamond | 39,214 |
| 321 | 12345678910 | 39,165 |
| 322 | killer1 | 39,092 |
| 323 | oliver | 39,086 |
| 324 | ferrari | 39,030 |
| 325 | benjamin | 39,026 |
| 326 | slipknot | 39,002 |
| 327 | christian | 38,977 |
| 328 | jasmine1 | 38,672 |
| 329 | hunter1 | 38,636 |
| 330 | 1234567a | 38,562 |
| 331 | stalker | 38,556 |
| 332 | asshole | 38,546 |
| 333 | richard | 38,293 |
| 334 | 147852369 | 38,260 |
| 335 | 123hfjdk147 | 38,222 |
| 336 | 123qweasd | 38,192 |
| 337 | abcdef | 38,073 |
| 338 | 11223344 | 38,015 |
| 339 | andrey | 37,922 |
| 340 | chocolate1 | 37,905 |
| 341 | monster | 37,898 |
| 342 | angela | 37,828 |
| 343 | valentina | 37,827 |
| 344 | purple1 | 37,793 |
| 345 | p | 37,789 |
| 346 | xxxxxx | 37,741 |
| 347 | welcome1 | 37,623 |
| 348 | fylhtq | 37,602 |
| 349 | red123 | 37,556 |
| 350 | hottie1 | 37,465 |
| 351 | 123asd | 37,276 |
| 352 | justin1 | 37,247 |
| 353 | zzzzzz | 37,167 |
| 354 | cheese | 37,145 |
| 355 | 142536 | 37,075 |
| 356 | juventus | 37,018 |
| 357 | metallica | 37,000 |
| 358 | chicken1 | 36,990 |
| 359 | andrew1 | 36,935 |
| 360 | brandon | 36,919 |
| 361 | pokemon1 | 36,878 |
| 362 | ????????????????????? | 36,804 |
| 363 | yellow | 36,789 |
| 364 | 456789 | 36,721 |
| 365 | 87654321 | 36,644 |
| 366 | lucky1 | 36,644 |
| 367 | vfhbyf | 36,619 |
| 368 | fuckoff | 36,616 |
| 369 | james1 | 36,501 |
| 370 | mommy1 | 36,482 |
| 371 | nirvana | 36,438 |
| 372 | carlos | 36,377 |
| 373 | vanessa | 36,259 |
| 374 | gabriel | 36,199 |
| 375 | silver | 36,179 |
| 376 | hannah1 | 36,177 |
| 377 | bailey | 36,149 |
| 378 | YAgjecc826 | 36,130 |
| 379 | lovers | 36,042 |
| 380 | zxc123 | 35,886 |
| 381 | butterfly1 | 35,804 |
| 382 | chelsea1 | 35,652 |
| 383 | robert1 | 35,580 |
| 384 | qaz123 | 35,575 |
| 385 | super123 | 35,527 |
| 386 | prince | 35,449 |
| 387 | 7654321 | 35,430 |
| 388 | hockey | 35,297 |
| 389 | ronaldo | 35,270 |
| 390 | elizabeth | 35,176 |
| 391 | 0000000000 | 35,070 |
| 392 | 999999999 | 35,014 |
| 393 | banana | 35,013 |
| 394 | 00000 | 34,817 |
| 395 | america1 | 34,725 |
| 396 | myspace123 | 34,657 |
| 397 | jesus | 34,550 |
| 398 | angels | 34,464 |
| 399 | 741852963 | 34,457 |
| 400 | vfrcbv | 34,383 |
| 401 | qwert1 | 34,150 |
| 402 | peanut | 34,147 |
| 403 | cocacola | 34,087 |
| 404 | samuel | 33,733 |
| 405 | rainbow | 33,618 |
| 406 | loveme1 | 33,591 |
| 407 | school | 33,501 |
| 408 | cookie1 | 33,235 |
| 409 | america | 33,208 |
| 410 | a1b2c3 | 33,177 |
| 411 | yamaha | 33,151 |
| 412 | asdfasdf | 33,142 |
| 413 | stella | 33,111 |
| 414 | PolniyPizdec0211 | 33,052 |
| 415 | morgan | 32,977 |
| 416 | jennifer1 | 32,871 |
| 417 | ???????????????????????? | 32,861 |
| 418 | family1 | 32,850 |
| 419 | buddy1 | 32,822 |
| 420 | nastya | 32,776 |
| 421 | loulou | 32,741 |
| 422 | nathan | 32,721 |
| 423 | spiderman | 32,692 |
| 424 | kristina | 32,669 |
| 425 | taylor1 | 32,663 |
| 426 | samantha1 | 32,655 |
| 427 | 159951 | 32,597 |
| 428 | yfnfif | 32,597 |
| 429 | elizabeth1 | 32,450 |
| 430 | freedom1 | 32,351 |
| 431 | qazqaz | 32,342 |
| 432 | steven | 32,274 |
| 433 | chicken | 32,215 |
| 434 | joshua1 | 32,212 |
| 435 | 421uiopy258 | 32,115 |
| 436 | 456123 | 32,104 |
| 437 | buster1 | 32,060 |
| 438 | alexis | 31,932 |
| 439 | SZ9kQcCTwY | 31,835 |
| 440 | david1 | 31,778 |
| 441 | lovely1 | 31,689 |
| 442 | diamond1 | 31,628 |
| 443 | fyfcnfcbz | 31,565 |
| 444 | 098765 | 31,555 |
| 445 | tigger1 | 31,553 |
| 446 | spongebob1 | 31,522 |
| 447 | harley1 | 31,493 |
| 448 | bandit | 31,473 |
| 449 | madison1 | 31,428 |
| 450 | music1 | 31,423 |
| 451 | genius | 31,413 |
| 452 | 9379992 | 31,411 |
| 453 | jackson | 31,407 |
| 454 | thomas1 | 31,291 |
| 455 | 123456m | 31,276 |
| 456 | whatever1 | 31,269 |
| 457 | daddy1 | 31,127 |
| 458 | nicolas | 31,116 |
| 459 | bubbles | 31,105 |
| 460 | i | 31,026 |
| 461 | 124578 | 31,013 |
| 462 | madison | 30,986 |
| 463 | 1password | 30,976 |
| 464 | mustang1 | 30,964 |
| 465 | cheese1 | 30,901 |
| 466 | friends1 | 30,836 |
| 467 | k. | 30,813 |
| 468 | 123qwe123 | 30,661 |
| 469 | qwerty123456 | 30,610 |
| 470 | lauren | 30,514 |
| 471 | mexico1 | 30,469 |
| 472 | mylove | 30,429 |
| 473 | fktrcfylh | 30,413 |
| 474 | 1234abcd | 30,361 |
| 475 | svetlana | 30,340 |
| 476 | scooter | 30,323 |
| 477 | myspace | 30,276 |
| 478 | monica | 30,190 |
| 479 | danielle | 30,160 |
| 480 | scorpion | 30,101 |
| 481 | a1b2c3d4 | 30,028 |
| 482 | 135790 | 29,958 |
| 483 | austin | 29,944 |
| 484 | 0123456 | 29,917 |
| 485 | naruto1 | 29,792 |
| 486 | lizottes | 29,760 |
| 487 | 852456 | 29,750 |
| 488 | sabrina | 29,746 |
| 489 | victor | 29,685 |
| 490 | alexandra | 29,665 |
| 491 | pass | 29,655 |
| 492 | david | 29,615 |
| 493 | patricia | 29,615 |
| 494 | tennis | 29,567 |
| 495 | klaster | 29,442 |
| 496 | q12345 | 29,285 |
| 497 | a838hfiD | 29,225 |
| 498 | summer1 | 29,060 |
| 499 | sexy123 | 28,932 |
| 500 | nicholas | 28,918 |
In this data breach, there are 10,218,714 users who used blank spaces as passwords – they consume 1.2741017177195957% of the entire user base – that’s just slightly over 1 percent.
Now we will take a look at alphabetical and numeric passwords. Passwords that begin with letters are analyzed below:
| # | The letter the password begins with | Count |
|---|---|---|
| 1 | a | 40,747,759 |
| 2 | b | 35,764,080 |
| 3 | c | 34,337,777 |
| 4 | d | 28,665,093 |
| 5 | e | 13,578,894 |
| 6 | f | 20,893,220 |
| 7 | g | 21,665,110 |
| 8 | h | 18,640,241 |
| 9 | i | 12,900,415 |
| 10 | j | 23,606,433 |
| 11 | k | 23,176,133 |
| 12 | l | 27,281,444 |
| 13 | m | 45,491,397 |
| 14 | n | 18,968,444 |
| 15 | o | 8,420,288 |
| 16 | p | 31,210,218 |
| 17 | q | 10,400,566 |
| 18 | r | 23,526,833 |
| 19 | s | 50,214,515 |
| 20 | t | 25,497,381 |
| 21 | u | 4,598,831 |
| 22 | v | 13,762,125 |
| 23 | w | 12,327,779 |
| 24 | x | 4,726,889 |
| 25 | y | 6,723,031 |
| 26 | z | 8,938,885 |
We can see that:
- Passwords beginning with the letter s consume the most – 6.260905219184763% of the user base;
- The letter s is followed by the letter m – passwords beginning with the letter m consume 5.672011865599142% of the entire user base;
- The letter m is followed by the letter b – passwords beginning with the letter b consume 4.459179086591624% of the entire user base;
- The letter b is followed by the letter c – passwords beginning with the letter c consume 4.2813430983950065% of the entire user base;
- The letter c is followed by the letter p – passwords beginning with the letter p consume 3.8913891086689625% of the entire user base.
These five letters together consume 24.5648283784395% of the entire user base – that’s almost a quarter. That would be just about 200 million – 197,017,987.00000003 – users.
Here’s an analysis of passwords that begin with numbers:
| The number the password begins with | Count |
|---|---|
| 0 | 21,282,656 |
| 1 | 65,386,388 |
| 2 | 28,041,232 |
| 3 | 11,945,815 |
| 4 | 8,757,666 |
| 5 | 8,998,604 |
| 6 | 7,951,182 |
| 7 | 9,016,142 |
| 8 | 9,721,076 |
| 9 | 9,516,928 |
We can see that:
- The most – 65,386,388 passwords – begin with the number 1. That’s 8.152582533015403% of the entire user base;
- The number 1 is followed by the number 2 – passwords beginning with the number 2 consume 3.4962698690044265% of the entire user base;
- The number 2 is followed by the number 0 – passwords beginning with the number 0 consume 2.6535891470526782% of the entire user base.
These three numbers combined consume 14.30244154907251% of the entire user base, meaning that the numbers 3,4,5,6,7,8 and 9 would consume the rest – 85.69755845092749% of the entire user base.
We can take a look at the password length too:
- There are 24,148,191 passwords that are less than or equal to 5 characters in length – that’s 3.010873152230397% of the entire user base;
- There are 621,405,217 passwords that are less than or equal to 10 characters in length – they consume 77.47877613363269% of the entire user base;
- There are 795,318,822 passwords that are less than or equal to 20 characters in length – they consume the majority – 99.16287678125893% – of the entire user base;
- There are 10,180,766 passwords that are more than 20 characters in length – they consume 1.26937024055094% of the entire user base;
- There are 4,340,997 passwords that are more than 30 characters in length – they consume 0.5412492936308436% of the entire user base;
- There are 696,661 passwords that are more than 40 characters in length – they consume 0.08686190618195708% of the entire user base;
- There are 278,737 passwords that are more than 50 characters in length – they consume 0.03475381447137155% of the entire user base;
- There are 163,730 passwords that are more than 60 characters in length – they consume 0.0204143764315382% of the entire user base;
- There are 86,778 passwords that are more than 70 characters in length – they consume 0.010819756660209014% of the entire user base;
- There are 53,269 passwords that are more than 80 characters in length – they consume 0.006641748110496599% of the entire user base;
- There are 35,768 passwords that are more than 90 characters in length – they consume 0.004459667844642144% of the entire user base;
- There are 25,409 passwords that are more than 100 characters in length – they consume 0.0031680748228727416% of the entire user base.
If we would take a look at interesting lengthy passwords, we would see that some of the passwords include game titles (for example “Afterlight”, “Age of Reckoning”, “Allied Assault”, “Armored Fury”, “Bad Company 2”, “Black Ops”, “Black Ops 2”, “Counter-Strike: Condition Zero” etc.) and even BCrypt hashes. The passwords as game titles often also include 20 or more characters of what it seems like some sort of serial keys.
All numeric passwords combined consume 22.519987133943054% of the entire user base – numeric passwords have been chosen by 180,617,689 users while alphabetical passwords were chosen by 566,063,781 users – they would consume 70.57863012028217% of the entire user base. If we deduct those from the total records, we can see that there were 6.90138274577478% users in the data breach who did not choose passwords that began with numbers or letters – that would be just over 55,351,355 users – the exact number would be 55,351,355.00000004.
Summary
Being one of the largest data breach compilations ever, the Exploit.in data breach puts very many people at risk. Since it is speculated that the list has been used for attacks known as “credential stuffing”, it should be a very clear indication for people to not reuse passwords and to change their passwords frequently.