The passwords, dumped on a cyber-underground forum on July 4 by a hacker called “ObamaCare” were collected from a variety of older and more recent breaches.
I don’t think they publish any new leaks but instead use other leaks to make a list for password crackers.
Indeed. It’s just a compilation of unique records.
“The dataset is too large to be of any realistic use as part of any effort to crack a given hash — it’s simply too much low-quality data to successfully use in attacks — and the value of the data is negligible compared to good prepared wordlists and rulesets in the hands of a capable actor," says Darren James, a senior product manager at Specops Software.
At 10 billion lines, you might have better luck just brute forcing the old fashioned way…