A Russian crime ring has hacked 1.2 billion usernames and passwords belonging to more than 500 million email addresses, according to a recent article from the New York Times.

Hold Security, a firm specializing in breach discovery, claimed that the stolen information came from more than 420,000 websites including from "many leaders in virtually all industries across the world."

The Milwaukee-based firm declined to name the victims, citing nondisclosure agreements. "They didn't just target large companies; instead, they targeted every site that their victims visited," Hold Security said in its report.

At the request of the New York Times, a security expert analyzed the database of stolen information and confirmed it was authentic.

So far, the criminals have not sold many of the records online, the New York Times reports. Instead, the stolen information has been used to send spam and install malicious redirections.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.