A Russian crime ring has hacked 1.2 billion usernames and passwords belonging to more than 500 million email addresses, according to a recent article from the New York Times.

Hold Security, a firm specializing in breach discovery, claimed that the stolen information came from more than 420,000 websites including from "many leaders in virtually all industries across the world."

The Milwaukee-based firm declined to name the victims, citing nondisclosure agreements. "They didn't just target large companies; instead, they targeted every site that their victims visited," Hold Security said in its report.

Recommended For You

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.