What was exposed, when it happened, and which databases confirm it.
- accounts
- 226,883,414
- Breached
- November 4, 2020
- Last Update
- November 19, 2020
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In November 2020, a collection of more than 23,000 allegedly breached websites known as Cit0day were made available for download on several hacking forums. The data consisted of 226M unique email address alongside password pairs, often represented as both password hashes and the cracked, plain text versions. Independent verification of the data established it contains many legitimate, previously undisclosed breaches. The data was provided to HIBP by dehashed.com.
Compromised Info
- Email addresses
- Passwords
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Cit0day breach?
The Cit0day breach exposed: Email addresses and Passwords.
When did the Cit0day breach happen?
The Cit0day breach was disclosed on November 4, 2020 and affected 226,883,414 records.
Am I affected by the Cit0day breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Cit0day leak.