Password Pandemonium: The 183 Million Reasons You Need Better Cybersecurity Now!
Over 183 million stolen usernames and passwords have been added to Have I Been Pwned. Dubbed the “Synthient Stealer Log Threat Data,” this isn’t your run-of-the-mill leak but a treasure trove of information swiped from computers with infostealers. Time to change those passwords and maybe your trust in browsers!

Hot Take:
Move over pumpkin spice lattes, it’s raining passwords this fall! Who needs a cozy sweater when you can snuggle up with a nice hot cup of “Oh no, my credentials are out there” while pondering why you didn’t change your password from “password123”? Thanks to a college student-turned-cyber sleuth, we’re reminded that infostealers are the real trick-or-treaters this season, collecting more than candy from unsuspecting computers.
Key Points:
- A staggering 183 million usernames and passwords have joined the “Have I Been Pwned” database, courtesy of infostealers.
- The data was collected by Benjamin Brundage, a college student working with Synthient LLC, who spent a year monitoring cybercriminal exchanges.
- Infostealer malware is sneaky, grabbing not just logins but also session cookies, credit card details, and cryptocurrency info.
- Troy Hunt’s “Pwned Passwords” service is working overtime, processing an astonishing 17.45 billion requests in 30 days.
- Experts stress the importance of passwordless authentication and zero-trust frameworks to combat this ongoing credential crisis.
Already a member? Log in here
