Cybersecurity firm Hold Security LLC said on Tuesday that it uncovered stolen credentials from 360 million accounts that are available for sale on cyber black markets. Alex Holden, chief information security officer of Hold Security LLC, said that his firm obtained the data over the past three weeks. He said tha the records were moat probably obtained in separate attacks. The firm is currently trying to identify the victims in order to alert the companies involved.

The credentials includes user names, which are typically email addresses, and passwords that in most cases are in unencrypted text.

In addition to the 360 million credentials, the criminals are selling some 1.25 billion email addresses.