Exploit.in Data Breach Analysis

Exploit.in Data Breach Analysis

Comments 0 Comment

Preface

The 2013 Verizon Breach Report found that 76% of intrusions exploited weak or stolen credentials. The problem is apparent – password reuse. It’s been there for a long time and as sad as it is, it seems that we’re not moving away from passwords anytime soon. The Exploit.in data breach is one of the prime examples of this problem in the wild.

What is it?

The Exploit.in data breach does not originate from one particular website – rather, it is a compilation of data breaches. This is why the data set is so large – with duplicates the data set contains over 800 million records split across 111 files.

The data format is pretty simple: the breach data contains email addresses and passwords separated by a colon. The Exploit.in data breach does not utilize any kind of hashing algorithm – all passwords appear to be in plain text making the problem even worse: such data is very likely to be exploited in “credential stuffing” attacks. Such an attack is used to gain unauthorized access to user accounts through automated login requests directed at a web application. Credential stuffing is often considered one of the biggest threats aimed at web applications today due to the volume of credentials already available in the wild and also due to the fact that it can be so easily automated. Here’s a diagram depicting such an attack:

In its essence, credential stuffing is an attack where attackers use mass log in attempts to verify the validity of stolen credential lists.

Email addresses

As there are more than 800 million records in this data set, naturally there are hundreds of email domains used by the people affected by this data leak. Top 500 email domains used on Exploit.in can be seen below:

#Email DomainCountCountry / Purpose
1yahoo.com138,694,410Commercial / United States
2hotmail.com108,288,333Commercial / United States
3mail.ru97,647,063Russia
4gmail.com71,224,306Commercial / United States
5yandex.ru41,799,395Russia
6rambler.ru26,534,464Russia
7aol.com25,057,923Commercial / United States
8hotmail.fr11,372,592France
9bk.ru10,748,837Russia
10web.de10,302,599Germany
11gmx.de9,918,031Germany
12list.ru9,880,436Russia
13inbox.ru9,350,401Russia
14yahoo.de7,353,964Germany
15lycos.de6,815,315Germany
16epost.de6,780,151Germany
17yahoo.fr6,751,712France
18msn.com6,518,503Commercial / United States
19live.com6,315,697Commercial / United States
20hotmail.co.uk5,533,502United Kingdom
21yahoo.co.uk4,673,314United Kingdom
22hotmail.it4,325,700Italy
23seznam.cz3,768,390Czech Republic
24aim.com3,518,770Commercial / United States
25comcast.net3,293,900Network Infrastructure
26qip.ru3,104,976Russia
27libero.it2,769,173Italy
28interia.pl2,618,794Poland
29sbcglobal.net2,534,957Network Infrastructure
30live.fr2,510,925France
31ymail.com2,275,493Commercial / United States
32myspace.com2,143,382Commercial / United States
33hotmail.de2,046,264Germany
34ukr.net1,991,618Network Infrastructure
35yaho.de1,918,838Germany
36wp.pl1,899,642Poland
37YAHOO.COM1,890,253Commercial / United States
38free.fr1,756,218France
39bigmir.net1,665,687Network Infrastructure
40hotmail.es1,423,706Spain
41yahoo.it1,384,971Italy
42orange.fr1,358,228France
43mail.ua1,313,215Ukraine
44verizon.net1,256,789Network Infrastructure
45wanadoo.fr1,173,148France
46live.it1,145,055Italy
47rocketmail.com1,095,363Commercial / United States
48bellsouth.net1,004,754Network Infrastructure
49cox.net994,741Network Infrastructure
50naver.com991,870Commercial / United States
51yahoo.com.br975,631Brazil
52yahoo.co.in961,833India
53de.com924,198Commercial / United States
54ya.ru918,170Russia
55live.co.uk910,633United Kingdom
56yahoo.es903,480Spain
57rediffmail.com889,567Commercial / United States
58googlemail.com881,466Commercial / United States
59o2.pl821,385Poland
60alice.it814,223Italy
61btinternet.com814,193Commercial / United States
62att.net760,492Network Infrastructure
63yahoo.co.id716,579India
64earthlink.net693,524Network Infrastructure
65tiscali.it668,972Italy
66freenet.de644,293Germany
67gmx.net620,338Network Infrastructure
68freemail.hu614,780Hungary
69HOTMAIL.COM606,658Commercial / United States
70charter.net571,103Network Infrastructure
71t-online.de565,801Germany
72yahoo.com.tw556,210Commercial / United States
73163.com526,577Commercial / United States
74laposte.net526,374Network Infrastructure
75abv.bg513,529Bulgaria
76mail.com503,070Commercial / United States
77yahoo.ca496,920Canada
78virgilio.it488,983Italy
79meta.ua487,238Ukraine
80windowslive.com473,721Commercial / United States
81qq.com454,857Commercial / United States
82hotmail.ru454,323Russia
83AOL.COM450,603Commercial / United States
84hanmail.net448,630Network Infrastructure
85live.nl437,837The Netherlands
86gmx.at431,724Austria
87live.de412,147Germany
88facebook.com410,052Commercial / United States
89ntlworld.com399,360Commercial / United States
90netscape.net380,424Network Infrastructure
91optonline.net369,716Network Infrastructure
92op.pl368,088Poland
93yahoo.com.ph363,382Commercial / United States
94yahoo.com.au355,672Commercial / United States
953a.by354,586Belarus
96mac.com346,216Commercial / United States
97yahoo.com.mx341,381Mexico
98yahoo.com.my338,588Malaysia
99tut.by337,088Belarus
100juno.com335,265Commercial / United States
101citromail.hu303,414Hungary
102azet.sk299,676Slovakia
103excite.com295,949Commercial / United States
104yahoo.gr290,180Greece
105outlook.com283,662Commercial / United States
106pochta.ru283,200Russia
107inbox.lv278,964Latvia
108bigpond.com259,793Commercial / United States
109centrum.cz259,587Czech Republic
110live.com.au256,217Australia
111me.com254,129Commercial / United States
112netzero.com251,038Commercial / United States
113peoplepc.com248,488Commercial / United States
114gmail.ru243,371Russia
115yahoo.com.ar243,048Commercial / United States
116tiscali.co.uk240,404United Kingdom
117neuf.fr235,252France
118arcor.de232,641Germany
119live.ca229,806Canada
120yahoo.co.jp227,529Japan
121sky.com227,327Commercial / United States
122bol.com.br226,629Commercial / United States
123126.com218,028Commercial / United States
124shaw.ca214,429Canada
125bluewin.ch213,318Switzerland
126adelphia.net213,024Network Infrastructure
127live.com.mx211,576Mexico
128voila.fr211,292France
129blueyonder.co.uk210,964United Kingdom
130mynet.com208,119Commercial / United States
131sfr.fr207,249France
132yandex.ua206,696Ukraine
133yahoo.in204,367India
134tlen.pl197,695Poland
135yahoo.com.hk196,086Commercial / United States
136email.it195,839Italy
137nate.com195,230Commercial / United States
138ig.com.br193,723Commercial / United States
139tin.it193,583Italy
140tmail.com189,727Commercial / United States
141netzero.net189,011Network Infrastructure
142email.cz188,577Czech Republic
143sympatico.ca187,820Canada
144rogers.com187,779Commercial / United States
145gmx.com183,605Commercial / United States
146hotmail.couk178,381United Kingdom
147cs.com177,090Commercial / United States
148vp.pl172,556Poland
149yahoo.com.sg157,737Commercial / United States
150lycos.com154,520Commercial / United States
151myway.com154,497Commercial / United States
152aliceadsl.fr154,401France
153optusnet.com.au154,232Commercial / United States
154e-mail.ru153,696Russia
155live.se152,571Sweden
156lenta.ru152,547Russia
157Yahoo.com148,546Commercial / United States
158poczta.onet.pl148,137Poland
159walla.com148,131Commercial / United States
160mchsi.com147,450Commercial / United States
161live.com.pt144,877Portugal
162uol.com.br143,101Commercial / United States
163us.army.mil139,125Military
164gmx.ch138,902Switzerland
165comcast.com137,532Commercial / United States
166yahoo.com.cn137,036China
167live.be136,367Belgium
168myrambler.ru136,225Russia
169caramail.com135,622Commercial / United States
170insightbb.com134,978Commercial / United States
171email.com134,240Commercial / United States
172sina.com134,152Commercial / United States
173talktalk.net131,061Network Infrastructure
174embarqmail.com130,576Commercial / United States
175narod.ru129,613Russia
176sapo.pt128,423Portugal
177yahoo.com.vn127,188Commercial / United States
178autorambler.ru127,063Russia
179centrum.sk126,510Slovakia
180gmail.co.uk126,088United Kingdom
181windstream.net125,425Network Infrastructure
182skynet.be124,719Belgium
183mailinator.com124,446Commercial / United States
184telenet.be122,941Belgium
185fastwebnet.it120,884Italy
186google.com120,871Commercial / United States
187live.dk120,552Denmark
188blackplanet.com119,300Commercial / United States
189yahoo.couk119,036United Kingdom
190terra.com.br118,690Commercial / United States
191club-internet.fr112,725France
192netscape.com110,789Commercial / United States
193gmail.com.br110,609Commercial / United States
194vkontakte.ru110,591Russia
195ro.ru106,657Russia
196poczta.fm105,337Radio Station
197onet.eu104,538European Union
198MYSPACE.COM104,123Commercial / United States
199yaho.com103,955Commercial / United States
200inwind.it103,356Italy
201tampabay.rr.com103,103Commercial / United States
202yndex.ru102,751Russia
203e1.ru102,319Russia
204online.de102,251Germany
205GMAIL.COM102,229Commercial / United States
206ngs.ru101,927Russia
207yahoo.coin101,462India
208roadrunner.com101,200Commercial / United States
209telus.net101,190Network Infrastructure
210frontiernet.net100,615Network Infrastructure
211sibmail.com100,011Commercial / United States
212email.ru99,832Russia
213corp.badoo.com99,386Commercial / United States
214gmail.com.tw98,259Commercial / United States
215yahoo.com97,810Commercial / United States
216spaces.ru96,332Russia
217bigpond.net.au96,321Network Infrastructure
218onet.pl94,105Poland
219yahoo.coid93,451Indonesia
220home.nl92,944The Netherlands
221hotmail.com.br92,149Commercial / United States
222ua.fm90,747Radio Station
223fsmail.net90,650Network Infrastructure
224Hotmail.com90,416Commercial / United States
225cfl.rr.com88,019Commercial / United States
226meil.ru87,936Russia
227yahoo.net87,329Network Infrastructure
228rock.com87,084Commercial / United States
229mobile.badoo.com86,254Commercial / United States
230yhaoo.com85,804Commercial / United States
231km.ru85,743Russia
232mai.ru85,299Russia
233yhoo.com85,284Commercial / United States
234cableone.net84,211Network Infrastructure
235videotron.ca83,308Canada
236xtra.co.nz82,823New Zealand
237virgin.net82,797Network Infrastructure
238yandex.com82,735Commercial / United States
239icloud.com82,125Commercial / United States
240nm.ru81,243Russia
241indiatimes.com80,444Commercial / United States
242live.ru79,310Russia
243interia.eu79,209European Union
244buziaczek.pl78,809Poland
245hotmail.be78,668Belgium
246net.hr77,714Croatia
247hot.ee77,239Estonia
248mindspring.com77,188Commercial / United States
249inbox.com76,978Commercial / United States
250hotmail.nl76,584The Netherlands
251prodigy.net76,370Network Infrastructure
252westpost.net75,717Network Infrastructure
253btopenworld.com75,594Commercial / United States
254terra.es75,348Spain
255mail.bg74,204Bulgaria
256yahoo.co.kr73,829South Korea
257hotmai.com73,332Commercial / United States
258one.lt72,849Lithuania
259sify.com71,963Commercial / United States
260live.com.ar71,545Commercial / United States
261telia.com71,304Commercial / United States
262eircom.net70,796Network Infrastructure
263centurytel.net70,676Network Infrastructure
264wmconnect.com70,304Commercial / United States
265yahoomail.com69,958Commercial / United States
266ovi.com68,890Commercial / United States
267sifree.it68,454Italy
268hotmail.ca67,166Canada
269q.com66,671Commercial / United States
270yopmail.com66,367Commercial / United States
271bellsouth.com66,212Commercial / United States
272planet.nl65,456The Netherlands
273i.ua65,319Ukraine
274r0.ru64,626Russia
275mail.ru;64,614Russia
276blendr.badoo.com64,534Commercial / United States
277verizon.com64,425Commercial / United States
278atlas.cz63,992Czech Republic
279telefonica.net63,389Network Infrastructure
280pacbell.net63,102Network Infrastructure
281suddenlink.net63,068Network Infrastructure
282alltel.net62,970Network Infrastructure
283fuse.net61,777Network Infrastructure
284aon.at61,248Austria
285zoznam.sk60,193Slovakia
286mail.ru;qwerty59,405Russia
287yahoo.ie59,325Ireland
288webmail.co.za58,967South Africa
289badoo.com58,573Commercial / United States
290katamail.com58,052Commercial / United States
291LIVE.COM57,953Commercial / United States
292pisem.net57,827Network Infrastructure
293volny.cz56,868Czech Republic
294MSN.COM56,370Commercial / United States
295homail.com56,204Commercial / United States
296AOL.com55,845Commercial / United States
297nc.rr.com55,801Commercial / United States
298online.no55,701Norway
299tds.net55,506Network Infrastructure
300Gmail.com55,451Commercial / United States
301email.ua55,237Ukraine
302sohu.com54,201Commercial / United States
303hotmail.co54,186Colombia
304mail.ry53,592Unknown
305wowway.com53,539Commercial / United States
306dodgit.com53,391Commercial / United States
307e-mail.ua53,323Ukraine
308usa.com53,312Commercial / United States
309pookmail.com53,280Commercial / United States
310hotmail.se52,965Sweden
311hughes.net52,841Network Infrastructure
312walla.co.il52,782Israel
313hotmail.com.au52,358Commercial / United States
314spambob.com52,212Commercial / United States
315univision.com52,025Commercial / United States
316trashymail.com51,985Commercial / United States
317hotmail.co.jp51,735Japan
318hetnet.nl51,428The Netherlands
319interfree.it51,048Italy
320wi.rr.com50,756Commercial / United States
321aol.co.uk50,736United Kingdom
322home.com50,722Commercial / United States
323yahoo.cn50,660China
324hotmail.co.th50,560Thailand
325hotmail.com.ar50,321Commercial / United States
326chello.nl49,870The Netherlands
327sms.at49,820Austria
328live.at49,765Austria
329hotmail.com.tr49,309Commercial / United States
330hotmail.gr49,242Greece
331online.ua49,225Ukraine
332AIM.COM49,184Commercial / United States
333btconnect.com49,072Commercial / United States
334sbcglobal.com48,756Commercial / United States
335ameritech.net48,340Network Infrastructure
336carolina.rr.com47,196Commercial / United States
337tesco.net47,116Network Infrastructure
338sprintpcs.com46,946Commercial / United States
339live.cl46,701Chile
340luukku.com46,641Commercial / United States
341mai1www.shootgardening.co.uk.h0st46,126United Kingdom
342yahoo.dk46,123Denmark
343yahoo.comph45,953Commercial / United States
344gala.net45,913Network Infrastructure
345post.sk45,565Slovakia
346yahoo.se45,551Sweden
347yahooo.com45,527Commercial / United States
348yaoo.com45,519Commercial / United States
349rediff.com45,486Commercial / United States
350tonline.de44,720Germany
351bbox.fr44,352France
352rochester.rr.com44,302Commercial / United States
353cogeco.ca44,301Canada
354front.ru44,227Russia
355spray.se43,887Sweden
356telkomsa.net43,630Network Infrastructure
357gazeta.pl43,564Poland
358webtv.net43,329Network Infrastructure
359yahho.com43,168Commercial / United States
360iol.pt43,097Portugal
361zoominternet.net42,969Network Infrastructure
362yahool.com42,850Commercial / United States
363gmx.fr42,767France
364hotmail.com.tw42,131Commercial / United States
365talk21.com42,036Commercial / United States
366gamil.com42,016Commercial / United States
367tom.com41,783Commercial / United States
368hotmail.ch41,717Switzerland
369hotbox.ru41,695Russia
370in.com41,438Commercial / United States
371triad.rr.com41,432Commercial / United States
372live.no41,262Norway
373cegetel.net41,254Network Infrastructure
374prodigy.net.mx41,096Mexico
375hotmail.net41,033Network Infrastructure
376yahoo.co.nz40,994New Zealand
377numericable.fr40,986France
378rcn.com40,783Commercial / United States
379hotmial.com40,212Commercial / United States
380i.softbank.jp40,192Japan
381ptd.net40,100Network Infrastructure
382hotmal.com40,093Commercial / United States
383gadball.com39,987Commercial / United States
384swbell.net39,384Network Infrastructure
385tele2.it39,213Italy
386land.ru39,047Russia
387y7mail.com38,877Commercial / United States
388latinmail.com38,842Commercial / United States
389nycap.rr.com38,544Commercial / United States
390aol.de38,481Germany
391amorki.pl38,347Poland
392austin.rr.com38,234Commercial / United States
393earthlink.com38,194Commercial / United States
394woh.rr.com38,126Commercial / United States
395live.ie38,089Ireland
396ol.com37,950Commercial / United States
397microsoft.com37,918Commercial / United States
398bigpond.com.au37,889Commercial / United States
399twcny.rr.com37,357Commercial / United States
400hotmil.com37,248Commercial / United States
401yahoo.co37,127Colombia
402clearwire.net36,954Network Infrastructure
403aol.net36,933Network Infrastructure
404oi.com.br36,873Commercial / United States
405tiscalinet.it36,726Italy
406noos.fr36,396France
407gmail.com.au36,299Commercial / United States
408vipmail.hu36,101Hungary
409mailcity.com35,915Commercial / United States
410one.lv35,888Latvia
411neo.rr.com35,766Commercial / United States
412satx.rr.com35,755Commercial / United States
413mweb.co.za35,516South Africa
414msa.hinet.net35,465Network Infrastructure
415hawaii.rr.com35,007Commercial / United States
416iinet.net.au34,825Network Infrastructure
417supereva.it34,731Italy
418hushmail.com34,724Commercial / United States
419COMCAST.NET34,695Network Infrastructure
420columbus.rr.com34,664Commercial / United States
421kc.rr.com34,600Commercial / United States
422live.cn34,537China
423fromru.com34,518Commercial / United States
424netcabo.pt34,431Portugal
425docomo.ne.jp34,307Japan
426att.com34,291Commercial / United States
427ezweb.ne.jp33,884Japan
428cinci.rr.com33,820Commercial / United States
429mail.dk33,813Denmark
430otenet.gr33,644Greece
431houston.rr.com33,638Commercial / United States
432breakthru.com33,127Commercial / United States
433chello.at33,124Austria
434tpg.com.au32,606Commercial / United States
435il.ru32,541Russia
436daum.net32,426Network Infrastructure
437autograf.pl32,409Poland
438example.com32,160Commercial / United States
439pandora.be32,078Belgium
440sc.rr.com31,954Commercial / United States
441hojmail.com31,889Commercial / United States
442worldnet.att.net31,729Austria
443yeah.net31,714Network Infrastructure
444okdc.com31,514Commercial / United States
445t-online.hu31,383Hungary
446fteenet.de31,342Germany
447bresnan.net31,278Network Infrastructure
448yahoo.pl31,269Poland
449globo.com31,227Commercial / United States
450knology.net31,108Network Infrastructure
451datingeurope.net30,948Network Infrastructure
452ofir.dk30,947Denmark
453gawab.com30,500Commercial / United States
454aliceposta.it30,474Italy
455iprimus.com.au30,438Commercial / United States
456zonnet.nl30,413The Netherlands
457tiscali.fr30,373France
458voliacable.com30,365Commercial / United States
459SBCGLOBAL.NET30,311Network Infrastructure
460wanadoo.nl30,303The Netherlands
461xs4all.nl30,212The Netherlands
462tiscali.cz30,010Czech Republic
463vodamail.co.za29,969South Africa
464hotamil.com29,589Commercial / United States
465ono.com29,519Commercial / United States
466snet.net29,505Network Infrastructure
467mail.by29,395Belarus
468go2.pl29,220Poland
46921cn.com29,217Commercial / United States
470gmai.com29,159Commercial / United States
471usa.net29,109Network Infrastructure
472msu.edu29,023Education
473YMAIL.COM28,954Commercial / United States
474o2.co.uk28,307United Kingdom
475frontier.com28,039Commercial / United States
476ziggo.nl27,926The Netherlands
477HOTMAIL.CO.UK27,756United Kingdom
478libertysurf.fr27,731France
479nyc.rr.com27,667Commercial / United States
480aport.ru27,492Russia
481nextmail.ru27,329Russia
482westnet.com.au27,099Commercial / United States
483murambler.ru26,812Russia
484tx.rr.com26,757Commercial / United States
485cox.com26,728Commercial / United States
486casema.nl26,556The Netherlands
487vipmail.net26,514Network Infrastructure
488mailcatch.com26,238Commercial / United States
489yahoo.no26,127Norway
490paran.com26,086Commercial / United States
491mil.ru25,935Russia
492wildblue.net25,914Network Infrastructure
493plasa.com25,885Commercial / United States
494mal.ru25,842Russia
495lycos.co.uk25,818United Kingdom
496tele2.fr25,816France
497mocospace.com25,737Commercial / United States
498yahoo.combr25,536Brazil
499ibest.com.br25,465Brazil
500attbi.com25,263Commercial / United States

In this data set, there were 46 countries that were associated with email domains. 5 of email domains had a different purpose – they were associated with education, military or had unknown sources.

Purpose / CountryTotal Users
Commercial / United States389,842,845
Russia203,283,285
Germany47,206,838
France26,092,163
Network Infrastructure20,099,487
Italy12,471,385
United Kingdom12,171,065
Poland6,574,020
Czech Republic4,367,424
Spain2,402,534
Ukraine2,230,253
Brazil1,948,406
India1,779,874
Canada1,323,750
Hungary985,678
The Netherlands919,529
Belarus721,069
Austria657,410
Mexico594,053
Bulgaria587,733
Slovakia531,944
Belgium494,773
Switzerland393,937
Japan387,647
Greece373,066
Portugal350,828
Malaysia338,588
Latvia314,852
Sweden294,974
Australia256,217
Denmark231,435
China222,233
Radio Station196,084
European Union183,747
Military139,125
South Africa124,452
New Zealand123,817
Norway123,090
Ireland97,414
Indonesia93,451
Colombia91,313
Croatia77,714
Estonia77,239
South Korea73,829
Lithuania72,849
Unknown53,592
Israel52,782
Thailand50,560
Chile46,701
Education29,023

Here’s an analysis of email addresses beginning with letters:

#Letter an email address begins withCount of email addresses
1a66,282,184
2b41,992,886
3c40,495,010
4d43,467,366
5e24,495,700
6f21,242,665
7g26,666,615
8h18,603,990
9i17,957,738
10j40,112,129
11k37,185,070
12l37,403,305
13m66,743,130
14n26,097,528
15o12,142,966
16p30,715,335
17q2,395,084
18r33,686,033
19s70,523,391
20t33,470,428
21u4,667,539
22v19,531,957
23w15,124,255
24x4,880,863
25y9,097,645
26z8,639,636

Here’s an analysis of email addresses beginning with numbers:

Number an email address begins withCount of email addresses
0812,738
13,410,408
21,522,406
31,040,831
4825,370
5662,828
6629,154
71,474,854
8772,510
9693,145

In this data breach, there are:

  • 5,429 email addresses consisting of 0 characters in length;
  • 4,980 email addresses consisting of 1 characters in length;
  • 2,038 email addresses consisting of 2 characters in length;
  • 14,644 email addresses consisting of 3 characters in length;
  • 194,429 email addresses consisting of 4 characters in length;
  • 16,462,822 email addresses consisting of 5 characters in length;
  • 29,792,114 email addresses consisting of 6 characters in length;
  • 165,972,861 email addresses consisting of 7 characters in length;
  • 56,302,118 email addresses consisting of 8 characters in length;
  • 274,633,133 email addresses consisting of 9 characters in length;
  • 64,442,280 email addresses consisting of 10 characters in length;
  • 4,911,355 email addresses consisting of 15 characters in length;
  • 1,731,936 email addresses consisting of 20 characters in length;
  • 334,040 email addresses consisting of 25 characters in length;
  • 45,651 email addresses consisting of 30 characters in length;
  • 6,582 email addresses consisting of 35 characters in length;
  • 1,311 email addresses consisting of 40 characters in length;
  • 1,260 email addresses consisting of 45 characters in length;
  • 364 email addresses consisting of 50 characters in length.

Most email addresses consist either of 9 or of 7 characters in length – in total, there are 440,605,994 such email addresses in this data breach. That means that 54.93615476398986% of users in this data breach used such email addresses.

Passwords

The top 500 passwords used in the Exploit.in data breach can be seen below:

#PasswordCount
19,394,973
21234565,021,150
31234567891,846,744
4qwerty1,348,258
5password1,013,304
6823,741
712345678762,590
8abc123761,558
9111111717,537
10password1689,459
111234567663,952
121234567890635,681
13123123577,044
1412345571,052
15000000512,949
161q2w3e4r5t502,213
17iloveyou420,894
18qwertyuiop358,704
191234333,871
20dragon300,340
21monkey298,395
22123456a257,989
23123321255,627
241qaz2wsx244,652
25654321230,337
26666666229,491
27123qwe227,036
28myspace1211,332
29target123205,930
30tinkle205,419
31121212205,296
321q2w3e4r203,926
337777777203,185
341g2w3e4r201,371
35gwerty201,269
36zag12wsx201,062
37gwerty123200,969
38qwe123194,053
39zxcvbnm187,142
40qwerty123175,965
411q2w3e172,074
42qazwsx170,280
43123169,770
44222222167,009
45555555166,135
46123abc162,971
47asdfghjkl159,926
48987654321156,994
49a123456152,732
50qwerty1151,323
51fuckyou148,720
52123123123145,730
53112233138,860
541234qwer136,772
55159753134,185
56computer131,351
57Status118,626
58789456123118,620
59gfhjkm113,502
60777777111,727
6111111111,568
62princess110,329
63iloveyou1108,330
6412qwaszx105,841
65ashley104,546
66asdfgh103,894
67asdf101,219
68samsung100,779
6912345a100,684
70fuckyou1100,174
71princess1100,114
72michael98,917
73football97,233
74azerty95,686
7512365495,124
76sunshine94,994
77123456789a94,421
78qwert93,148
79qwer123490,981
80football190,966
81daniel90,360
8299999989,054
83zxcvbn88,298
84aaaaaa84,902
85q1w2e3r484,764
86abcd123484,419
87master83,802
88123456q83,111
89superman83,085
90monkey182,814
91a1234582,089
92jessica81,594
93jordan2381,471
941111111181,014
95shadow80,257
96blink18279,911
97asd12378,540
98parola78,233
99love12378,199
100qazwsxedc78,087
101asdasd77,806
102babygirl177,500
10313131377,113
1048888888876,414
105jesus176,183
106michael175,953
107killer75,912
10833333375,163
109charlie73,310
110marina72,616
111apple72,607
11278945672,596
113love72,509
114qweqwe71,828
115baseball71,535
116soccer71,339
11798765470,993
118golfer70,734
11988888870,082
120q1w2e3r4t5y670,071
121abc69,933
12215935769,279
123jordan69,273
1243rJs1la7qE69,079
125thomas68,182
126!68,179
127qweasdzxc67,832
128liverpool67,617
129ghbdtn67,456
130naruto67,370
131hello166,638
132111111166,583
133angel166,455
13412345q66,179
13566666,046
136iloveyou265,300
137nicole65,268
138michelle65,238
139q1w2e365,077
140111164,573
14114725836963,785
142VQsaBLPzLa63,617
143098765432162,990
144??????????????????62,947
145jessica162,622
146bitch161,928
14710203061,924
14812345qwert61,762
149012345678961,294
150andrew61,271
151nikita60,811
152cjmasterinf60,764
153111111111160,560
154jennifer60,145
155user60,074
156134259,043
157fuckyou258,911
15801020358,678
159qweasd58,678
16029096658,518
161hello58,509
162trustno158,395
163anthony158,297
164wall.e58,247
1651241358,173
166tudelft58,158
167DIOSESFIEL58,153
168PE#5GZ29PTZMSE58,136
169dpbk123458,087
170U38fa3958,064
171charlie158,051
17210101058,048
173q1w2e3r4t557,803
174secret57,765
175joshua57,328
176money157,044
177andrea56,936
178anthony56,906
179passw0rd56,827
180qwertyu56,761
1811qazxsw256,526
182soccer156,196
18329rsavoy55,991
184superman155,943
185welcome55,769
186asdasd555,681
1871234432155,670
188baseball155,604
189linkedin55,489
190internet55,449
191robert55,339
19221212155,331
193tigger55,021
194number154,910
195hunter54,644
196lovely54,596
197pokemon54,537
1981234123454,482
199$HEX54,050
200asdf123454,041
201freedom53,250
202123456153,169
203sunshine153,111
204justin52,313
205george51,617
206asshole151,437
20714725851,172
208letmein51,005
20950cent50,982
21069696950,941
211!~!150,884
212ashley150,820
213qwaszx50,552
214forever50,353
215buster50,319
216amanda50,012
217149,892
218chelsea49,784
219natasha49,579
220summer49,345
221purple49,297
222alexander49,001
223chocolate48,936
224pakistan48,745
225password248,744
226friends48,719
227jordan148,427
228matrix48,396
229password1248,385
230lol12348,204
231william48,145
232martin48,016
233hello12347,971
23423232347,749
235mother47,642
236matthew47,641
237xbox36047,610
238mustang47,580
239hannah47,512
240samantha47,236
241shadow147,219
242flower47,192
2430000000047,140
244eminem46,331
245Exigent46,307
246batman46,104
247nicole146,089
248butterfly46,080
249qqqqqq46,038
250maggie46,017
251liverpool145,788
252chris145,473
253london45,408
254adidas45,187
255babygirl45,132
256sergey45,051
25714785244,795
258brandon144,795
259arsenal44,487
260basketball44,378
2611q2w3e4r5t6y44,311
262angel44,265
263loveme44,207
264startfinding44,069
265Sojdlg123aljg43,829
266123455432143,728
267loveyou43,675
268whatever43,558
269mercedes43,482
270patrick43,447
271orange43,427
272harley43,355
273pepper43,040
274NULL43,025
2755555542,832
276iloveu42,735
277sandra42,724
278love1242,701
279dragon142,640
280junior42,523
281starwars42,335
282000041,997
2831qaz2wsx3edc41,954
284qwerty1234541,844
285joseph41,803
286qazxsw41,738
287481516234241,711
288qwerty1241,575
289barcelona41,550
290a12345678941,532
291cookie41,446
29212365478941,191
293computer141,160
294jasmine41,144
29544444441,105
296happy141,062
297family40,937
298jonathan40,872
299melissa40,809
300matthew140,685
301qwertyui40,618
302ginger40,519
303william140,503
304123456789q40,489
305snoopy40,442
306zaq12wsx40,309
307michelle140,291
308sophie40,258
309123456789140,252
31012378940,160
311amanda140,017
312antonio39,950
313paSSword39,864
314mickey39,718
315victoria39,548
31625252539,545
31711122239,463
318taylor39,420
319daniel139,342
320diamond39,214
3211234567891039,165
322killer139,092
323oliver39,086
324ferrari39,030
325benjamin39,026
326slipknot39,002
327christian38,977
328jasmine138,672
329hunter138,636
3301234567a38,562
331stalker38,556
332asshole38,546
333richard38,293
33414785236938,260
335123hfjdk14738,222
336123qweasd38,192
337abcdef38,073
3381122334438,015
339andrey37,922
340chocolate137,905
341monster37,898
342angela37,828
343valentina37,827
344purple137,793
345p37,789
346xxxxxx37,741
347welcome137,623
348fylhtq37,602
349red12337,556
350hottie137,465
351123asd37,276
352justin137,247
353zzzzzz37,167
354cheese37,145
35514253637,075
356juventus37,018
357metallica37,000
358chicken136,990
359andrew136,935
360brandon36,919
361pokemon136,878
362?????????????????????36,804
363yellow36,789
36445678936,721
3658765432136,644
366lucky136,644
367vfhbyf36,619
368fuckoff36,616
369james136,501
370mommy136,482
371nirvana36,438
372carlos36,377
373vanessa36,259
374gabriel36,199
375silver36,179
376hannah136,177
377bailey36,149
378YAgjecc82636,130
379lovers36,042
380zxc12335,886
381butterfly135,804
382chelsea135,652
383robert135,580
384qaz12335,575
385super12335,527
386prince35,449
387765432135,430
388hockey35,297
389ronaldo35,270
390elizabeth35,176
391000000000035,070
39299999999935,014
393banana35,013
3940000034,817
395america134,725
396myspace12334,657
397jesus34,550
398angels34,464
39974185296334,457
400vfrcbv34,383
401qwert134,150
402peanut34,147
403cocacola34,087
404samuel33,733
405rainbow33,618
406loveme133,591
407school33,501
408cookie133,235
409america33,208
410a1b2c333,177
411yamaha33,151
412asdfasdf33,142
413stella33,111
414PolniyPizdec021133,052
415morgan32,977
416jennifer132,871
417????????????????????????32,861
418family132,850
419buddy132,822
420nastya32,776
421loulou32,741
422nathan32,721
423spiderman32,692
424kristina32,669
425taylor132,663
426samantha132,655
42715995132,597
428yfnfif32,597
429elizabeth132,450
430freedom132,351
431qazqaz32,342
432steven32,274
433chicken32,215
434joshua132,212
435421uiopy25832,115
43645612332,104
437buster132,060
438alexis31,932
439SZ9kQcCTwY31,835
440david131,778
441lovely131,689
442diamond131,628
443fyfcnfcbz31,565
44409876531,555
445tigger131,553
446spongebob131,522
447harley131,493
448bandit31,473
449madison131,428
450music131,423
451genius31,413
452937999231,411
453jackson31,407
454thomas131,291
455123456m31,276
456whatever131,269
457daddy131,127
458nicolas31,116
459bubbles31,105
460i31,026
46112457831,013
462madison30,986
4631password30,976
464mustang130,964
465cheese130,901
466friends130,836
467k.30,813
468123qwe12330,661
469qwerty12345630,610
470lauren30,514
471mexico130,469
472mylove30,429
473fktrcfylh30,413
4741234abcd30,361
475svetlana30,340
476scooter30,323
477myspace30,276
478monica30,190
479danielle30,160
480scorpion30,101
481a1b2c3d430,028
48213579029,958
483austin29,944
484012345629,917
485naruto129,792
486lizottes29,760
48785245629,750
488sabrina29,746
489victor29,685
490alexandra29,665
491pass29,655
492david29,615
493patricia29,615
494tennis29,567
495klaster29,442
496q1234529,285
497a838hfiD29,225
498summer129,060
499sexy12328,932
500nicholas28,918

In this data breach, there are 10,218,714 users who used blank spaces as passwords – they consume 1.2741017177195957% of the entire user base – that’s just slightly over 1 percent.

Now we will take a look at alphabetical and numeric passwords. Passwords that begin with letters are analyzed below:

#The letter the password begins withCount
1a40,747,759
2b35,764,080
3c34,337,777
4d28,665,093
5e13,578,894
6f20,893,220
7g21,665,110
8h18,640,241
9i12,900,415
10j23,606,433
11k23,176,133
12l27,281,444
13m45,491,397
14n18,968,444
15o8,420,288
16p31,210,218
17q10,400,566
18r23,526,833
19s50,214,515
20t25,497,381
21u4,598,831
22v13,762,125
23w12,327,779
24x4,726,889
25y6,723,031
26z8,938,885

We can see that:

  • Passwords beginning with the letter s consume the most – 6.260905219184763% of the user base;
  • The letter s is followed by the letter m – passwords beginning with the letter m consume 5.672011865599142% of the entire user base;
  • The letter m is followed by the letter b – passwords beginning with the letter b consume 4.459179086591624% of the entire user base;
  • The letter b is followed by the letter c – passwords beginning with the letter c consume 4.2813430983950065% of the entire user base;
  • The letter c is followed by the letter p – passwords beginning with the letter p consume 3.8913891086689625% of the entire user base.

These five letters together consume 24.5648283784395% of the entire user base – that’s almost a quarter. That would be just about 200 million – 197,017,987.00000003 – users.

Here’s an analysis of passwords that begin with numbers:

The number the password begins withCount
021,282,656
165,386,388
228,041,232
311,945,815
48,757,666
58,998,604
67,951,182
79,016,142
89,721,076
99,516,928

We can see that:

  • The most – 65,386,388 passwords – begin with the number 1. That’s 8.152582533015403% of the entire user base;
  • The number 1 is followed by the number 2 – passwords beginning with the number 2 consume 3.4962698690044265% of the entire user base;
  • The number 2 is followed by the number 0 – passwords beginning with the number 0 consume 2.6535891470526782% of the entire user base.

These three numbers combined consume 14.30244154907251% of the entire user base, meaning that the numbers 3,4,5,6,7,8 and 9 would consume the rest – 85.69755845092749% of the entire user base.

We can take a look at the password length too:

  • There are 24,148,191 passwords that are less than or equal to 5 characters in length – that’s 3.010873152230397% of the entire user base;
  • There are 621,405,217 passwords that are less than or equal to 10 characters in length – they consume 77.47877613363269% of the entire user base;
  • There are 795,318,822 passwords that are less than or equal to 20 characters in length – they consume the majority – 99.16287678125893% – of the entire user base;
  • There are 10,180,766 passwords that are more than 20 characters in length – they consume 1.26937024055094% of the entire user base;
  • There are 4,340,997 passwords that are more than 30 characters in length – they consume 0.5412492936308436% of the entire user base;
  • There are 696,661 passwords that are more than 40 characters in length – they consume 0.08686190618195708% of the entire user base;
  • There are 278,737 passwords that are more than 50 characters in length – they consume 0.03475381447137155% of the entire user base;
  • There are 163,730 passwords that are more than 60 characters in length – they consume 0.0204143764315382% of the entire user base;
  • There are 86,778 passwords that are more than 70 characters in length – they consume 0.010819756660209014% of the entire user base;
  • There are 53,269 passwords that are more than 80 characters in length – they consume 0.006641748110496599% of the entire user base;
  • There are 35,768 passwords that are more than 90 characters in length – they consume 0.004459667844642144% of the entire user base;
  • There are 25,409 passwords that are more than 100 characters in length – they consume 0.0031680748228727416% of the entire user base.

If we would take a look at interesting lengthy passwords, we would see that some of the passwords include game titles (for example “Afterlight”, “Age of Reckoning”, “Allied Assault”, “Armored Fury”, “Bad Company 2”, “Black Ops”, “Black Ops 2”, “Counter-Strike: Condition Zero” etc.) and even BCrypt hashes. The passwords as game titles often also include 20 or more characters of what it seems like some sort of serial keys.

All numeric passwords combined consume 22.519987133943054% of the entire user base – numeric passwords have been chosen by 180,617,689 users while alphabetical passwords were chosen by 566,063,781 users – they would consume 70.57863012028217% of the entire user base. If we deduct those from the total records, we can see that there were 6.90138274577478% users in the data breach who did not choose passwords that began with numbers or letters – that would be just over 55,351,355 users – the exact number would be 55,351,355.00000004.

Summary

Being one of the largest data breach compilations ever, the Exploit.in data breach puts very many people at risk. Since it is speculated that the list has been used for attacks known as “credential stuffing”, it should be a very clear indication for people to not reuse passwords and to change their passwords frequently.

Leave a Reply

Your email address will not be published. Required fields are marked *