Collection #1 is a massive credential-stuffing compilation built from thousands of earlier breaches. leaksear.ch indexes 2.69B records containing email addresses with plaintext or hashed passwords, creating risk for anyone who reused credentials.
A CDEK leak indexed by leaksear.ch contains 194.9 million records with email addresses and names. Public breach listings tie the CDEK incident to March 9, 2022, while the exact intrusion vector remains unconfirmed.
A Hitachi Vantara Salesforce CRM export indexed by leaksear.ch contains 2.3 million records tied to contacts, leads, users, cases and account-contact data. The dataset includes names, emails, phone numbers, addresses, usernames and CRM metadata, and is associated in metadata with the 2025 Salesforce customer data-theft and extortion wave.
A Cbassociations dataset indexed by leaksear.ch contains 2.36M Salesforce-derived records tied to Icarus extortion claims from June 22, 2026. Searchable data includes names, addresses, countries, IP addresses and usernames, giving defenders practical pivots for exposure checks.