Collection #1 is a massive credential-stuffing compilation built from thousands of earlier breaches. leaksear.ch indexes 2.69B records containing email addresses with plaintext or hashed passwords, creating risk for anyone who reused credentials.
A CDEK leak indexed by leaksear.ch contains 194.9 million records with email addresses and names. Public breach listings tie the CDEK incident to March 9, 2022, while the exact intrusion vector remains unconfirmed.
BigBasket's 2020 customer data leak is indexed by leaksear.ch with 15.7 million records tied to emails, phones, addresses, dates of birth, IP addresses and hashed passwords. Public reporting traced the broader breach to data sold on the dark web before it was posted publicly in April 2021.
PicBackMan appears in a reported April 2026 database leak containing 38,767 indexed records. The dataset includes contact identifiers, password-related fields, IP addresses, device telemetry, and subscription/payment metadata.
A June 2026 ShinyHunters extortion leak tied to Moody Bible Institute has been indexed by leaksear.ch with 2,225,599 records. The data includes emails, names, phone numbers, dates of birth, and physical addresses tied to donor, supporter, student, and alumni information.
A Farmapatria leak indexed by leaksear.ch includes 3.18 million records tied to vaccination and identity data. The exposed fields create practical risks for phishing, impersonation, and health-related social engineering.
A Zacks Investment Research leak indexed by leaksear.ch includes 8,880,596 records with contact details, usernames, and unsalted SHA-256 password hashes. Public reporting tied the larger corpus to data that surfaced on a hacking forum in June 2023.
A Hitachi Vantara Salesforce CRM export indexed by leaksear.ch contains 2.3 million records tied to contacts, leads, users, cases and account-contact data. The dataset includes names, emails, phone numbers, addresses, usernames and CRM metadata, and is associated in metadata with the 2025 Salesforce customer data-theft and extortion wave.
A Gms-net leak indexed by leaksear.ch contains 31,249 Salesforce CRM records with contact and account-related fields. Public reporting ties the alleged Salesforce data theft to the ICARUS extortion group's June 2026 SaaS and CRM-focused activity.