Understand the identity data already exposed outside your organization
Explore how exposed credentials, personal information, and infostealer data can connect across identities, devices, and online services. Constella’s Q3 2026 report examines intelligence collected and processed during July–September, with comparisons to Q2 and a new year-to-date view against full-year 2025.
Download the Report Now
Three findings to explore
- 67 billion verified records ingested during Q3, following verification, deduplication, and quality review.
- 57 billion curated records containing plaintext passwords. Record counts do not represent unique passwords or people.
- 01 million devices with Q3 infection dates, up 8.71% from Q2.
What you will learn
- How the mix of exposed identity attributes changed, including larger shares of full names and birthdates.
- How infostealer data connects credentials with online services and available device identifiers.
- Where attributed breach and infostealer data was concentrated, and how to interpret those distributions.
- How January–September 2026 collection and ingestion compare with full-year 2025.
Practical priorities for investigating exposed identities and responding to potential compromise.
Why Constella?
Constella collects breach and infostealer intelligence across the surface, deep, and dark web, then applies verification, deduplication, quality controls, and expert analysis before data enters the Constella Data Lake. The result is identity risk intelligence designed to help organizations connect fragmented exposure, understand potential risk, and take action.
Insights from the Front Lines of Identity Risk
Stay ahead of emerging threats with proprietary research and actionable analysis from the Constella Intelligence Team.
