Skip to Main Content
Database with 500 million login credentials found - says the BKA

BKA: Database with 500 million login credentials found – Are you there?

A stash of 500 million login credentials, including email addresses and passwords, has been found says the German BKA (BundesKriminalAmt – Federal Criminal Police Office) on its website. The database was found on an “underground economy platform”. Yes, 500 million is a huge finding!

More details provided by the BKA? Unfortunately not really…

Unfortunately, the press statement (in German only) doesn’t say where the data comes from and therefore it’s not possible to give more precise details about this finding. Perhaps the BKA found the same database 1.5 months after Bob Diachenko’s finding. His find included data from LinkedIn, Dropbox, Lastfm, MySpace, Adobe, Tumblr, Badoo, and much more.

To check if your login credentials are included, the BKA recommends that you visit the website of the Hasso-Plattner-Institute and use their Identity Leak Checker tool. After you’ve entered your email address, you’ll receive an email including the result. If you really want to be sure your login credentials are not compromised you should also check them against haveibeenpwned.com.

How to protect yourself in the best possible way

Even if you don’t find yourself in these data sets, the sheer amount of stolen credentials alone should make you think about your account security. The following tips should help you to protect your accounts even more:

  • Passwords such as 1234 are a no go. You also shouldn’t use any other password from our list of the worst passwords of them all.
  • You should change your passwords on a regular basis – yes, even the passwords of your email accounts.
  • A password manager simplifies your life and you just have to remember one password: The master password.

  • Whenever possible, you should activate the 2-factor authentification of your accounts. It might be less convenient but it’s way more secure.
  • An antivirus also ensures that trojans, keylogger, and similar malware don’t have a chance on your devices!
  • It’s essential that programs and software are up-to-date! Security gaps in applications are one of the biggest security risks for your devices. If you don’t have the time or if you’re not in the mood to take care of this, then use a Software Updater.

Sounds like work? It is! But with the previously mentioned tools, you will be able to reduce your efforts to a big possible extent — and we also offer an all-in-one package: The Avira Free Security Suite includes all related to your protection, privacy, and performance. If you’d like to enjoy some more services we’re also offering Avira Prime.

This post is also available in: German

Avira, a company with over 100 million customers and more than 500 employees, is a worldwide leading supplier of self-developed security solutions for professional and private use. With more than 25 years of experience, the company is a pioneer in its field.