Hundreds of millions of hacked usernames and passwords for email accounts and other websites have been stolen, a security expert told Reuters. Bobbi Rebell reports.
Hundreds of millions of usernames and passwords for email accounts and other websites have been hacked, according to a security expert. Alex Holden, founder and Chief information security officer of Hold Security. He tells Reuters that the information is being traded in Russia's criminal underworld. Holden who has helped uncover major data breaches before, found a young Russian hacker bragging in an online forum that he had collected and was ready to give away a far larger number of stolen credentials that ended up totalling 1.17 billion records. It is one of the biggest stashes of stolen credentials to be uncovered since cyber attacks hit major U.S. banks and retailers two years ago. While many of the 272 million stolen accounts are on Russia's most popular email service Mail.ru, some are Google, Yahoo and Microsoft accounts. Email is often the most valuable digital asset according to Ben Johnson, co-founder of digital security firm Carbon Black. SOUNDBITE: BEN JOHNSON, CHIEF SECURITY STRATEGIST, CARBON BLACK (ENGLISH) SAYING: "They can use them for spam, to log in and spread to people you know. To try your email user name and password as credentials for other websites so there is a whole plethora of things they could try with it. " Thousands of other stolen username/password combinations appear to belong to employees of some of the largest U.S. banking, manufacturing and retail companies, and are vulnerable to attack, according to Holden. Microsoft responded saying. "Microsoft has security measures in place to detect account compromise and requires additional information to verify the account owner and help them regain sole access." Yahoo and Google did not respond to requests for comment.