Exposed Credentials Data – April 11, 2025

Exposed Credentials updates, including:

• Upgrades to the underlying Exposed Credentials systems.
• More relevant sources for breaches where possible, available in breach descriptions in the Rating Details page.
• Per a Policy Review Board decision, sensitive breaches (where someone's presence in the breach may adversely impact them if others are able to find that they were a member of the site) are highlighted. See the case log.

  Example: The Ashley Madison breach is an example of a sensitive breach and an exception we have made to our policy in the past to include in Exposed Credentials.

  Past sensitive breaches have the same Observation Date of January 30, 2025.

• Terms and Conditions that apply when Downloading Credentials have been updated, organizations will be required to accept the updated terms and conditions before downloading credentials.
• Updated column names in the credentials download. All information provided remains the same. The changes are as follows:
  • Observation Date → observation_date
  • Exposure Date → event_date
  • Breach Site → breach_name
  • Account → account