Last night, the NYT’s Nicole Perlroth and David Gelles uncovered the details of the latest mega-hack in which a Russian crime ring has amassed 1.2 billion username-password combinations, and more than 500 million email addresses by way of 420,000 websites.

+ The security company that shared this data is now willing to let you know if you’re on the list for an annual subscription fee of $120. Hmmm. While you’re thinking about that, you can change your passwords for free.