Hunt, who maintains the 'Have I been pwned' website that shows if an email appears in a breach, writes that Collection #1 is made up of 2,692,818,238 rows of email addresses and passwords across 12,000 separate files. Security researcher Troy Hunt has highlighted 'Collection #1,' a set of records made up of 773 million unique email addresses and 21 million unique passwords. What just happened? One of the largest collections of leaked user login credentials has appeared.