Have I Been Pwned adds over 284 million compromised passwords from latest breach

Data breach news is reported with such regularity now that it’s easy to feel jaded by each new leak of login details. The scale of this latest breach should give us all pause, however. Have I Been Pwned, the website where you check just how many password leaks your email address has been attached to, reports that 284,132,969 logins have been compromised in this latest data breach. Which is rather a lot.

“In February 2025,” the site explains, “23 billion rows of stealer logs were obtained from a Telegram channel known as ALIEN TXTBASE.” Troy Hunt, the founder of Have I Been Pwned, went into more detail on his blog, explaining that news of this breach came via a contact in a government agency, and consisted of “two files totalling just over 5GB” distributed via Telegram.