What was exposed, when it happened, and which databases confirm it.
- accounts
- 18,787,288
- Breached
- January 9, 2014
- Last Update
- September 10, 2014
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In September 2014, a large dump of nearly 5M usernames and passwords was posted to a Russian Bitcoin forum. Whilst commonly reported as 5M "Gmail passwords", the dump also contained 123k yandex.ru addresses. Whilst the origin of the breach remains unclear, the breached credentials were confirmed by multiple source as correct, albeit a number of years old.
Compromised Info
- Email addresses
- Passwords
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
5,828,273 accounts DEHASHED reports beyond HIBP
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via AI direct match to LeakCheck (90% confidence)
- HIBP
FAQ
What was leaked in the BTSec breach?
The BTSec breach exposed: Email addresses and Passwords.
When did the BTSec breach happen?
The BTSec breach was disclosed on January 9, 2014 and affected 18,787,288 records.
Am I affected by the BTSec breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the BTSec leak.