Collection #1 Data Release -How Big of a Deal is This to Fraud? + Interview with Aaron Sherman

The Online Fraudcast with Brett Johnson & Karisse Hendrick show

Summary: Last week, news broke of a new cache of stolen PII data being released. "Collection #1" consisted of over 700 million e-mail addresses and over 20 million passwords. And, it was reported more collections (2-6) would be released soon. But, shortly after the news was announced, many experts reported the bulk of the data had already been released in to the dark markets, so the majority of the "Collection #1" data was "old". Many experts stated this wasn't a big deal because the information is already out. But, is this really no big deal for fraud? Brett & Karisse asked friend of the podcast, Aaron Sherman, Senior Director of Cyber Threat Intelligence at Braintrace. aaron had a few days to look through the Colllection #1 data and shares observations he found, as well as insights that can be gained from this data that will continue to be useful for fraudsters to commit fraud. Password safety, employee training, credential stuffing and business email compromise are just a few of the topics discussed in this episode. Subscribe to Online FraudCast to be alerted when new episodes are out! Original Article Detailing Collection #1: Have I been pwned website: Learn more about your ad choices. Visit