If Have I Been Pwned have these credentials then you can bet that the threat actors have them as well.
Have I Been Pwned adds 71 million emails from Naz.API stolen account list (bleepingcomputer.com)
Your takeaway from this
It is important you and your team understand the importance of any credentials issued to them to the organisation’s cyber security. Training is essential.
Clive Catton MSc (Cyber Security) – by-line and other articles
Please Note:
I am on leave so the news this week is “in brief”. You can still contact me via the contact page and Octagon Technology.