Blog

Maza/Mazafaka was breached in March 2021, exposing a small but sensitive forum dataset tied to usernames, emails, passwords, certificate-related credentials, and legacy messaging IDs. Security teams should treat reused handles and contact identifiers as pivots for phishing and identity correlation.

A Sinister.ly dataset indexed by leaksear.ch contains 2,813 forum account records with emails, usernames, IP addresses, dates of birth, password hashes, and salts. Public reporting previously referenced a leaked Sinister.ly user database, but the breach date and intrusion method remain unconfirmed.

An unverified WorkL dataset indexed by leaksear.ch contains 465,231 account records with emails, usernames, names, countries, and password hashes. The breach date and exposure method are not confirmed.

Collection #1 is a massive credential-stuffing compilation built from thousands of earlier breaches. leaksear.ch indexes 2.69B records containing email addresses with plaintext or hashed passwords, creating risk for anyone who reused credentials.

A CDEK leak indexed by leaksear.ch contains 194.9 million records with email addresses and names. Public breach listings tie the CDEK incident to March 9, 2022, while the exact intrusion vector remains unconfirmed.

BigBasket's 2020 customer data leak is indexed by leaksear.ch with 15.7 million records tied to emails, phones, addresses, dates of birth, IP addresses and hashed passwords. Public reporting traced the broader breach to data sold on the dark web before it was posted publicly in April 2021.

A leaksear.ch index lists 1,458,549 records tied to legacy Exact Sciences cancer diagnostics systems after Abbott confirmed unauthorized access in its Cancer Diagnostics business. The fields include contact details, dates of birth, employee account attributes, and patient registry clinical data.