Pemiblanc Data Breach

What happened

In April 2018, a credential stuffing list containing 111 million email addresses and passwords known as Pemiblanc was discovered on a French server. The list contained email addresses and passwords collated from different data breaches and used to mount account takeover attacks against other services. Read more about the incident.

Exposed data

Recommended actions

• Change your Pemiblanc password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Pemiblanc — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.