The password-sleuths from LeakedSource.com have released their January update, and it contains the details of 191 million people.
Major websites in the latest edition of the list of breached data added to the website include Elance.com, the freelance job website, brazzers.com, a leader in adult entertainment, HelloKitty.com and a recent breach of Chinese video hosting service YouKu.com.
Although not all breaches are new and some are years old, the exact number of entries of 191,057,599, would fill a country that would be the seventh biggest in the world, sitting in between Pakistan and Nigeria.
As usual, this amount of customer data out in the wild presents multiple issues.
Due to frequent password reuse, criminals may be able to target individuals, and access their other accounts such as PayPal and email accounts, which could then help with more sophisticated attacks such as identity theft and fraud.
The same data may also be reused in the enterprise, and allow access into privileged systems. This was the case in Dropbox's fate, which led to the theft of details belonging to over 60 million users.
Leaked Source describe themselves as “a collaboration of data found online in the form of a search engine.” They say the purpose of the tool is to give users the ability to search and find whether their data is available online or not.
The site's goal is to make it easy to find where user data has been released publicly such as LinkedIn, MySpace and Dropbox databases. The website says, “We are not responsible for any data leaks, we just find them for you and our scripts make them searchable.”
The news comes as the website of the E-Sports Entertainment Association (ESEA), one of the largest competitive video gaming communities on the planet, was hacked last December. As a result, a database containing 1.5 million player profiles was compromised.
Alex Mathews, lead security evangelist of Positive Technologies, commented: “The gaming community is quite a target for hackers because these people hold ‘convenient' values: game attributes and virtual property what could go to a new owner on the other side of the planet with just a click (almost the same way as electronic money). Many gamers invest more money in virtual worlds than they spent buying a car, and it could be lost in a second as a result of cyber-attacks.”