Cit0day

cit0day.in

226,803,683
Exposed Records
Nov 2020
Breach Date
5 years ago
Plain Text
Password Risk
Information Technology industry
Information Technology
Industry
Added to XposedOrNot on November 8, 2023 · #11 of 763 breaches by records exposed

About This Breach

Cit0day.in was a popular cybercriminal forum known for buying and selling stolen data, as well as providing tools and resources for conducting cyber attacks. In November 2020, the forum's entire database was leaked online, exposing the personal information of its users and the details of their illicit activities. The leaked database contained information from numerous breaches, including LinkedIn, MySpace, Adobe, and many others. The data included usernames, passwords, email addresses, and other sensitive information.

Data Exposed

Email addresses
Passwords

Breach Details

Breach Type Data Breach
Searchable Yes
Verified No
Sensitive Data No
Reference https://www.zdnet.com/article/23600-hacked-databases-have-leaked-from-a-defunct-data-breach-index-site/ (opens in new tab)

Frequently Asked Questions

When did the Cit0day data breach happen?

Cit0day was breached in Nov 2020. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the Cit0day breach?

226,803,683 records were exposed, making it the #11 largest of the 763 breaches in our index.

What data was exposed in the Cit0day breach?

The exposed data includes: Email addresses, Passwords.

What should I do if I was affected by the Cit0day breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.