It is time to change passwords on the following services.
Yesterday I discovered a nefarious post on pastebin.com that listed out numerous databases available for sale. The types of accounts largely fell into a few categories:
1. Social Media Online Community Products
2. 16 State’s Voter Database Information & Federal Government Agency employee records
3. Adult Content Websites

I performed some verification of the number of records the rogue poster listed as available for sale and found that the record counts tied out to publicly reported counts of registered voters for several of the State Government Voter Roles publicly available. Because the data appeared to be authentic, I subsequently reported this to a contact at a U.S. Federal Government agency and saw that it was removed this morning, leaving me to believe that the dump of data was the real deal. While it is possible that this wasn’t the real thing, the high degree of correlation I found between known publicly reported databreaches impacting some of these sites listed, such as Adobe, Dropbox, MySpace, LinkedIn, Equifax and Ashley Madison, makes this a real threat that everyone should presume is real. Taking a moment to force password rotation for any of these listed websites could prove critical to preventing further problems for anyone who had their credentials compromised in mass.

I am not going to list the handle of the person that was using a Jabber account to conduct business, but if you see a website from the list below that you happen to use, I encourage you to update your password before someone compromises your account on that website. I did some searches for the handle offering to broker these credentials and came across a Jabber communication server that was allegedly seized by the Dutch Authorities, the FBI and Interpol. (Another reason why I suspect this compromise is the real deal!)

We already know that some of these domain names listed reported databreaches, but it is best to rotate passwords again just to be safe!

Here is the list ranked by largest number of records allegedly for sale to least number of records.

Rank Website Records Listed For Sale
1 (exploit.in) Exploit.in Combolist 805,499,579
2 (N/A) Anti Public Combolist 562,077,492
3 (myspace.com) Myspace Database 360,213,048
4 (163.com|126.com) NetEase(163.com & 126.com) Database 288,584,667
5 (linkedin.com) LinkedIn Database 164,611,595
6 (adobe.com) Adobe Database 152,445,165
7 (badoo.com) Badoo Database 112,005,531
8 (youku.com) Youku Database 100,244,186
9 (vk.com) VK Database 93,338,602
10 (rambler.ru) Rambler (Рамблер) Database 91,436,280
11 (edmodo.com) Edmodo Database 77,039,862
12 (twitter.com) Twitter Database 71,644,773
13 (dropbox.com) Dropbox Database 68,648,009
14 (tumblr.com) Tumblr Database 65,469,298
15 (modbsolutions.com) Modern Business Solutions 58,848,308
16 (zoosk.com) Zoosk Database 57,554,881
17 (turkiye.gov.tr) Turkish Citizenship Database 49,611,709
18 (imesh.com) iMesh Database 49,467,477
19 (fling.com) Fling Database 40,767,652
20 (last.fm) Last.fm Database 37,217,682
21 (ashleymadison.com) Ashley Madison Database 30,811,934
22 (tianya.cn) Tianya Database 29,020,808
23 (17.media) 17.Media (17 直播) Database 28,052,322
24 (experian.com) Experian T-Mobile Records Database 27,835,340
25 (mate1.com) Mate1 Database 27,393,015
26 (neopets.com) Neopets Database 26,892,897
27 (r2games.com) Reality Squared Games Database 22,281,337
28 (taobao.com) Taobao Database 21,149,008
29 (usa.gov) USA Business Database 19,716,360
30 (dodonew.com) Dodonew (嘟嘟) Database 16,283,140
31 (7k7k.com) 7k7k Database 14,928,048
32 (000webhost.com) 000Webhost Database 13,545,468
33 (canada.ca) Canadian Residential Database 13,334,319
34 (cfire.mail.ru) CrossFire Forum Database 12,884,302
35 (florida.gov) Florida Voter Database 12,539,780
36 (usa.gov) USA Consumer Database 11,884,804
37 (lbsg.net) Lifeboat Network Database 11,870,144
38 (178.com) 178 Database 9,072,977
39 (heroesofnewerth.com) Heroes of Newerth Database 8,764,949
40 (kaixin001.com) Kaixin001 Database 8,283,110
41 (gamigo.com) Gamigo Database 8,243,604
42 (usa.gov) USA Business & Investor Database 8,190,841
43 (usa.gov) Ohio Voters Database 7,893,338
44 (ohio.gov) Ohio Voter Database 7,509,310
45 (northcarolina.gov) North Carolina Voter Database 7,444,748
46 (michigan.gov) Michigan Voter Database 7,408,330
47 (leet.cc) Leet.cc Minecraft Database 6,085,759
48 (xat.com) Xat Database 5,968,783
49 (parapa.mail.ru) Пара Па Database 5,030,536
50 (mail.ru) Mail.Ru Dump 4,821,262
51 (snapchat.com) Snapchat Database 4,609,615
52 (washington.gov) Washington Voter Database 4,411,385
53 (adultfriendfinder.com) Adult Friend Finder Database 3,867,997
54 (neteller.com) Neteller Database 3,621,582
55 (colorado.gov) Colorado Voter Database 3,525,885
56 (subagames.com) SubaGames Database 3,494,889
57 (dlh.net) Dirty Little Helper Database 3,231,255
58 (mpgh.net) MultiPlayer Game Hacks & Cheats Database 3,122,898
59 (mcresolver.pw) Minecraft Resolver Database 3,080,236
60 (xsplit.com) XSplit Database 2,983,472
61 (mop.com) Mop Database 2,648,739
62 (funimation.com) FUNimation Database 2,513,523
63 (connecticut.gov) Connecticut Voter Database 2,391,357
64 (patreon.com) Patreon Database 2,330,382
65 (oklahoma.gov) Oklahoma Voter Database 2,158,410
66 (shadi.com) Shadi Dating Database 2,036,333
67 (flashflashrevolution.com) Flash Flash Revolution Database 1,942,380
68 (canada.ca) Canadian Business Database 1,883,972
69 (cdprojektred.com) CD Projekt Red Forums Database 1,871,470
70 (naughtyamerica.com) Naughty America Database 1,756,489
71 (usa.gov) Arkansas Voters Database 1,746,067
72 (nihonomaru.net) Nihonomaru Database 1,697,282
73 (ddo.com) Dungeons & Dragons Database 1,645,529
74 (ubisoft.com) Ubisoft Forum Database 1,540,733
75 (elance.com/upwork.com) Elance / Upwork Database 1,407,732
76 (lotro.org) Lord Of The Rings Database 1,358,358
77 (youporn.com) Youporn Database 1,327,567
78 (nextgenupdate.com) NextGenUpdate Database 1,194,597
79 (nv.gov) Nevada Voter Database 1,160,839
80 (forbes.com) Forbes Database 1,071,963
81 (binweevils.com) Bin Weevils Database 1,022,883
82 (ovh.com) OVH & Kimsufi Database 969,084
83 (*Multiple*) CrimeAgency vBulletin Dump 942,044
84 (stratfor.com) Stratfor Database 932,936
85 (habbo.st) Habbo.st Hotel Database 888,584
86 (brazzers.com) Brazzers Database 790,724
87 (abandonia.com) Abandonia Database 782,609
88 (blackhatworld.com) Black Hat World Database 777,387
89 (hltv.org) HLTV Database 756,614
90 (androidforums.com) Android Forums Database 745,355
91 (ri.gov) Rhode Island Voter Database 740,049
92 (utah.gov) Utah Voter Database 731,639
93 (paddypower.com) PaddyPower Database 716,878
94 (programmingforums.org) Programming Forums Database 708,173
95 (mspy.com) mSpy Database 699,793
96 (texas.gov) Texas Voter Database 657,695
97 (delaware.gov) Delaware Voter Database 645,327
98 (pennsylvania.gov) Pennsylvania Voter Database 620,201
99 (xfinity.com) Comcast Database 616,882
100 (webhostingtalk.com) Web Hosting Talk Database 611,217
101 (nulled.io) Nulled Database 599,080
102 (battlefieldheroes.com) Battlefield Heroes Database 530,270
103 (powerbot.org) Powerbot.org Database 504,840
104 (payasugym.com) PayAsUgym Database 498,781
105 (alaska.gov) Alaska Voter Database 487,415
106 (scam.com) Scam Database 474,989
107 (crackingforum.com) Cracking Forum Database 469,550
108 (wiiuiso.com) WiiUISO Database 457,333
109 (openraid.org) OpenRaid Database 457,083
110 (voices.yahoo.com) Yahoo Voices Database 453,492
111 (ps3hax.net) PS3Hax Database 447,410
112 (cheapassgamer.com) Cheap Ass Gamer Database 444,767
113 (solomid.net) Solomid Database 442,166
114 (acne.org) Acne Database 432,943
115 (xbox-scene.com) Xbox Scene Database 432,552
116 (avast.com) Avast Database 422,959
117 (planetminecraft.com) Planet Minecraft Database 403,413
118 (xhamster.com) xHamster Database 369,804
119 (apple.com) Apple Database 355,161
120 (chinaeko.com) China EKO Database 348,556
121 (plex.tv) Plex Media Database 328,832
122 (ys168.com) YS168 Database 328,587
123 (torrent-invites.com) Torrent Invites Forum Database 317,457
124 (majorgeeks.com) Major Geeks Database 268,947
125 (cannabis.com) Cannabis Forum Database 227,747
126 (rsboards.com) RuneScape Boards Database 224,550
127 (forums.dayz.com) DayZ.com Forum Database 206,585
128 (allwomenstalk.com) All Womens Talk Database 200,257
129 (gtagaming.com) GTAGaming Database 197,184
130 (minefield.fr) MineField Database 188,552
131 (cardingmafia.ws) Carding Mafia Database 177,940
132 (ipmart-bg.com) iPmart BG Database 172,314
133 (animutank.com) Animu Tank Database 170,707
134 (aimjunkies.com) Aim Junkies Database 166,380
135 (muslimmatch.com) Muslim Match Database 149,830
136 (linuxmint.com) Linux Mint Database 144,989
137 (bleachanime.org) Bleach Anime Database 144,979
138 (alabama.gov) Alabama Voter Database 132,788
139 (scufgaming.com) Scuf Gaming Database 129,033
140 (pokemoncreed.net) Pokemon Creed Database 116,465
141 (forum.malwarebytes.com) MalwareBytes Forum Database 111,611
142 (newseasims.com) NewseaSIMS Database 109,199
143 (thebot.net) The Bot Net Database 96,422
144 (horseandhound.co.uk) Horse & Hound Database 95,338
145 (autohotkey.com) Auto Hot Key (AHK) Database 88,871
146 (newsoflegends.com) News Of Legends Database 71,804
147 (exilemod.com) Exile Mod Database 71,221
148 (comicbookresources.com) Comic Book Resources Database 65,197
149 (vodafone.is) Vodafone Database 56,021
150 (djchat.com) DJChat Database 54,911
151 (womanandhome.com) Woman And Home Database 46,112
152 (bitshacking.com) BitsHacking Database 41,348
153 (passwordscity.com) PasswordsCity Database 39,738
154 (d3scene.com) D3Scene Database 32,816
155 (fbi.gov) FBI+DHS Employee Dump 31,547
156 (forums.bandainamcogames.com) Bandai Namco Forums Database 26,554
157 (1337-crew.to) 1337 Crew Database 18,965
158 (lizardsquad.org) Lizard Squad Stresser Database 13,451
159 (demonforums.net) Demon Forums Database 11,613
160 (rathack.net) Rat Hack Database 11,509
161 (alphas.sx) Alphas.sx Forum Database 8,508
162 (dayzforum.net) DayzForum.net Database 7,902
163 (gta5base.com) GTA5Base Database 5,278
164 (digitalgangster.com) Digital Gangster Database 4,299
165 (superstresser.com) Super Stresser Database 2,241
166 (143vpn.com) 143VPN Database 586