Back to Radar
CI

Cit0day

Critical

Cit0day breach exposed 226M email and password pairs from numerous websites.

Records exposed
226,883,414 records
Breach date
Breach Nov 4, 2020
Last update
Updated Nov 19, 2020

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesPasswords

Why does this breach matter?

In-depth analysis of the breach and its implications.

In November 2020, a significant repository of breached website databases under the moniker 'Cit0day' became accessible on various illicit forums. The compromised data spans over 226M records containing email addresses and corresponding passwords, including both hashed and plaintext formats. Through independent confirmation, these records represent authentic credentials sourced from previously undisclosed breaches. The data was aggregated and provided through collaboration with dehashed.com.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users risk unauthorized account access due to compromised credentials.
Business Impact
Organizations face heightened risks of impersonation attacks and increased password reset requests.
Affected Sectors
  • All sectors using exposed credentials
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Immediately change passwords for accounts associated with breached credentials.
  • Enable two-factor authentication on all accounts.
  • Check accounts for unauthorized activities.

Preventive Measures

  • Use strong, unique passwords for every account.
  • Leverage a reputable password manager.
  • Monitor credit and personal accounts for suspicious activities.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Change passwords for any affected accounts and enable multifactor authentication immediately.