Whose personal data do the police process in the No More Leaks project, and how do they obtain it?

Hundreds of millions of username-password combinations have been unlawfully disclosed through data breaches in recent years. Lists of leaked login credentials, known as combo lists, are offered by criminals online and found in criminal investigations.

As part of No More Leaks, the police collect combo lists of login credentials obtained in the performance of police duties (Section 3 of the Police Act) and from criminal investigations. The decision on sharing lists from criminal investigations lies, in terms of investigative interest, with the leader of the relevant investigation, the assigned public prosecutor.

These combo lists of login credentials are hashed with a strong mathematical hashing algorithm. The hashing algorithm complies with nationally and internationally accepted standards for securing confidential information.