FBI Links a Single Hacker to the Theft of 1.2 Billion Stolen Log-Ins 

By Jamie Condliffe on at

The US Federal Bureau of Investigation (FBI) has managed to link the theft of 1.2 billion log-in credentials to a single hacker, after finding a Russian email address within reams of data obtained by security researchers.

Reuters reports that documents made public by a federal court in Milwaukee reveal how the FBI has identified the email address of the hacker in question by his online alias, “mr.grey”. The hacker’s email address was found buried within the spam utilities that were used to bombard compromised email accounts.

Back in August 2014, Milwaukee-based security research firm Hold Security revealed that a Russian hacking ring had gathered over 1.2 billion username and password combinations and over 500 million email addresses from more than 420,000 websites.

The so-called Mr.Grey seems to have advertised his wares online, claiming on forums to have access to large pools of user data acquired from Facebook, Twitter and Russian-based social network VK.

It’s currently unclear if the FBI has managed to use the information to identify the whereabouts of the hacker. [Reuters]

Image by Brian Klug under Creative Commons licence

Want more updates from Gizmodo UK? Make sure to check out our @GizmodoUK Twitter feed, and our Facebook page.