This page is the public reference for platform figures used across the GNSAC website and product collateral. It explains what each number means and what it does not establish.
De-duplicated records classified as corporate credential exposure within the production repository.
Repository coverage changes as sources are added, removed or reprocessed; a record is not proof of a currently valid credential.
Approximate production ingestion volume across credential, underground-source, threat-intelligence and hash processing pipelines.
A rolling operational estimate, not a guaranteed minimum; source availability and reprocessing can materially change daily volume.
Approximate daily records entering credential-exposure processing before all review and de-duplication stages complete.
Processing volume is not the number of unique affected people or organisations.
Hash observations processed for exposure context within the intelligence repository.
The count includes observations, not necessarily unique or currently usable passwords.
Records indexed from selected underground and leak-data collections.
A record may represent a claim or observation requiring validation; it is not itself confirmation of an incident.
Selected source endpoints or collections configured for recurring production monitoring.
Availability and lawful access vary; source count does not measure relevance or completeness.
Actor profiles present in the production knowledge base at the snapshot date.
Profiles may merge aliases and vary in confidence or activity status.
Selected lawfully accessible messaging communities included in recurring monitoring.
Channels may become unavailable or change scope without notice.
Distinct enabled checks or processing modules in the production assessment workflow.
Applicable modules vary by scope, domain structure, licence and source availability.
URL observations classified for phishing-infrastructure analysis.
Classification status can change after review or source updates.
Indicator observations retained for correlation and investigation context.
An indexed indicator is not necessarily malicious, current or relevant to every customer.
Vulnerability records available to enrich externally observed technology findings.
Availability does not mean every record is applicable to, or exploitable in, a customer environment.
Active and historical leak-site source records available to the monitoring workflow.
Sites and mirrors change frequently; a source count is not a guarantee of continuous access.
Repository and processing figures describe the production dataset at a point in time. They do not represent unique people, guaranteed coverage, detection of every exposure or proof that every record is current or valid. Source availability, reprocessing and de-duplication can change the figures.
