Britain says fighters intercept Russian aircraft approaching Baltic states

RAF Typhoons fly above RAF Lossiemouth in Scotland,

LONDON (Reuters) – British Typhoon fighter jets have intercepted three Russian military transport aircraft approaching the Baltic States, the defense ministry said on Thursday.

The British fighters, scrambled from the Amari air base in Estonia, intercepted the Russian aircraft, which were not transmitting a recognized identification code and were unresponsive, the ministry said.

“We were able to instantly respond to this act of Russian aggression – demonstration of our commitment to NATO’s collective defense,” Defence Secretary Michael Fallon said in a statement.

(Reporting by Guy Faulconbridge; editing by Andrew Roche)

U.S. activates Romanian missile defense site, angering Russia

NATO and Romanian Prime Minister

By Robin Emmott

DEVESELU, Romania (Reuters) – The United States switched on an $800 million missile shield in Romania on Thursday that it sees as vital to defend itself and Europe from so-called rogue states but the Kremlin says is aimed at blunting its own nuclear arsenal.

To the music of military bands at the remote Deveselu air base, senior U.S. and NATO officials declared operational the ballistic missile defense site, which is capable of shooting down rockets from countries such as Iran that Washington says could one day reach major European cities.

“As long as Iran continues to develop and deploy ballistic missiles, the United States will work with its allies to defend NATO,” said U.S. Deputy Defence Secretary Robert Work, standing in front of the shield’s massive gray concrete housing that was adorned with a U.S. flag.

Despite Washington’s plans to continue to develop the capabilities of its system, Work said the shield would not be used against any future Russian missile threat. “There are no plans at all to do that,” he told a news conference.

Before the ceremony, Frank Rose, deputy U.S. assistant secretary of state for arms control, warned that Iran’s ballistic missiles can hit parts of Europe, including Romania.

When complete, the defensive umbrella will stretch from Greenland to the Azores. On Friday, the United States will break ground on a final site in Poland due to be ready by late 2018, completing the defense line first proposed almost a decade ago.

The full shield also includes ships and radars across Europe. It will be handed over to NATO in July, with command and control run from a U.S. air base in Germany.

Russia is incensed at such of show of force by its Cold War rival in formerly communist-ruled eastern Europe. Moscow says the U.S.-led alliance is trying to encircle it close to the strategically important Black Sea, home to a Russian naval fleet and where NATO is also considering increasing patrols.

“It is part of the military and political containment of Russia,” Andrey Kelin, a senior Russian Foreign Ministry official, said on Thursday, the Interfax news agency reported.

“These decisions by NATO can only exacerbate an already difficult situation,” he added, saying the move would hinder efforts to repair ties between Russia and the alliance.

Russian President Vladimir Putin’s office said Moscow also doubted NATO’s stated aim of protecting the alliance against Iranian rockets following the historic nuclear deal with Tehran and world powers last year that Russia helped to negotiate.

“The situation with Iran has changed dramatically,” Putin’s spokesman Dmitry Peskov said.

RETALIATION

The readying of the shield also comes as NATO prepares a new deterrent in Poland and the Baltics, following Russia’s 2014 annexation of Crimea. In response, Russia is reinforcing its western and southern flanks with three new divisions.

Poland is concerned Russia may retaliate further by announcing the deployment of nuclear weapons to its enclave of Kaliningrad, located between Poland and Lithuania. Russia has stationed anti-aircraft and anti-ship missiles there, able to cover huge areas and complicate NATO’s ability to move around.

The Kremlin says the shield’s aim is to neutralize Moscow’s nuclear arsenal long enough for the United States to strike Russia in the event of war. Washington and NATO deny that.

“Missile defense … does not undermine or weaken Russia’s strategic nuclear deterrent,” NATO Secretary-General Jens Stoltenberg said at the Deveselu base.

However, Douglas Lute, the United States’ envoy to NATO, said NATO would press ahead with NATO’s biggest modernization since the Cold War. “We are deploying at sea, on the ground and in the air across the eastern flanks of the alliance … to deter any aggressor,” Lute said.

At a cost of billions of dollars, the missile defense umbrella relies on radars to detect a ballistic missile launch into space. Sensors then measure the rocket’s trajectory and destroy it in space before it re-enters the earth’s atmosphere. The interceptors can be fired from ships or ground sites.

The Romanian shield, which is modeled on the United States’ so-called Aegis ships, was first assembled in New Jersey and then transferred to the Deveselu base in containers.

While U.S. and NATO officials are adamant that the shield is designed to counter threats from the Middle East and not Russia, they remained vague on whether the radars and interceptors could be reconfigured to defend against Russia in a conflict.

The United States says Russia has ballistic missiles, in breach of a treaty that agreed the two powers must not develop and deploy missiles with a range of 500 km (310.69 miles) to 5,500 km. The United States declared Russia in non-compliance of the treaty in July 2014.

The issue remains sensitive because the United States does not want to give the impression it would be able to shoot down Russian ballistic missiles that were carrying nuclear warheads, which is what Russia fears.

(Additional reporting by Jack Stubbs, Andrew Osborn and Maria Tsvetkova in Moscow; Editing by Tom Heneghan)

Georgian army begins U.S. led military excersize, angering Russia

Georgian servicemen attend an opening ceremony of U.S. led joint military exercise "Noble Partner 2016" in Vaziani

By Margarita Antidze

TBILISI (Reuters) – The Georgian army began two weeks of military exercises with the United States and Britain on Wednesday, drawing an angry response from former Soviet master Russia which called the war games “a provocative step”.

About 650 soldiers from the United States, 150 from Britain and 500 from Georgia were taking part in the maneuvers, with Washington dispatching an entire mechanized company including eight Bradley infantry fighting vehicles and, for the first time, eight M1A2 Abrams main battle tanks.

Georgia’s Defence Minister Tina Khidasheli said the drills were an important event for the South Caucasus republic.

“This is one of the biggest exercises that our country has ever hosted, this is the biggest number of troops on the ground, and the largest concentration of military equipment,” Khidasheli told Reuters.

But the exercises went down badly in Moscow where the Russian Foreign Ministry last week warned they could destabilize the region, a charge denied by Georgian officials.

“These exercises are not directed against anyone. There is no trace of provocation,” Georgia’s Prime Minister Georgy Kvirikashvili said in a statement.

Russia defeated Georgia in a short war in 2008 over the breakaway Georgian region of South Ossetia, and Moscow continues to garrison troops there and to support another breakaway region, Abkhazia.

The exercises were run out of the Vaziani military base near Georgia’s capital Tbilisi.

Russian forces used to be based there until they withdrew at the start of the last decade under the terms of a European arms reduction agreement.

“The importance of these exercises is to improve interoperability between Georgia, the United States and the United Kingdom. … It enables us to prepare Georgia’s contribution to a NATO response force,” Colonel Jeffrey Dickerson, the U.S. director of the exercises, told Reuters.

The United States has spoken favorably of the idea that Georgia might one day join NATO, something Russia firmly opposes.

(Editing by Alexander Winning/Andrew Osborn)

U.S. to switch on European missile shield despite Russian alarm

U.S. Defense Secretary Carter testifies on operations against the Islamic State on Capitol Hill in Washington

By Robin Emmott

BUCHAREST (Reuters) – The United States’ European missile defense shield goes live on Thursday almost a decade after Washington proposed protecting NATO from Iranian rockets and despite Russian warnings that the West is threatening the peace in central Europe.

Amid high Russia-West tension, U.S. and NATO officials will declare operational the shield at a remote air base in Deveselu, Romania, after years of planning, billions of dollars in investment and failed attempts to assuage Russian concerns that the shield could be used against Moscow.

“We now have the capability to protect NATO in Europe,” said Robert Bell, a NATO-based envoy of U.S. Defense Secretary Ash Carter. “The Iranians are increasing their capabilities and we have to be ahead of that. The system is not aimed against Russia,” he told reporters, adding that the system will soon be handed over to NATO command.

The United States will also start construction on a second site in Poland on Friday that is due to be ready in 2018, giving NATO a permanent, round-the-clock shield in addition to radars and ships already in the Mediterranean.

Russia is incensed at such of show of force by its Cold War rival in formerly communist-ruled eastern Europe where it once held sway. Moscow says the U.S.-led alliance is trying to encircle it close to the strategically important Black Sea, home to a Russian naval fleet and where NATO is also considering increasing patrols.

The readying of the shield also comes as NATO prepares a new deterrent in Poland and the Baltics, following Russia’s 2014 annexation of Crimea. In response, Russia is reinforcing its western and southern flanks with three new divisions.

Despite U.S. assurances, the Kremlin says the missile shield’s real aim is to neutralize Moscow’s nuclear arsenal long enough for the United States to make a first strike on Russia in the event of war.

The shield relies on radars to detect a ballistic missile launch into space. Tracking sensors then measure the rocket’s trajectory and intercept and destroy it in space, before it re-enters the earth’s atmosphere. The interceptors can be fired from ships or ground sites.

The Russian ambassador to Denmark warned a year ago that Danish warships would become targets for Russian nuclear missiles if Denmark joined the shield project by installing radars on its vessels. Denmark is upgrading at least one frigate to house a ballistic missile sensor.

Turkey is already hosting a U.S. radar and the Netherlands has equipped ships with radars. The United States also has four ships in Spain as part of the defenses, while all NATO nations are contributing funding.

“Ballistic missile defense sites could pose threats to the stability and strategic assets of the Russian Federation,” Russia’s ambassador to NATO, Alexander Grushko, told Reuters last month.

‘ROGUE STATES’

U.S. officials dismiss the Russian view as “strategic paranoia” and blame Moscow for breaking off talks with NATO in 2013 that were aimed at explaining how the shield would operate.

The United States says Russia was seeking a treaty limiting the capability and range of ballistic missile interceptors. “No government could agree to that,” U.S. adviser Bell said.

Russian officials are concerned about technology that the United States says it does not have, including a missile defense interceptor capable of speeds of 10 km (6.2 miles) per second that could destroy Russian missiles.

First agreed by the U.S. government 2007 and then canceled and relaunched by the newly-elected U.S. President Barack Obama in 2009, the missile defense shield’s stated aim is to protect North America and Europe from so-called rogue states such as Iran and North Korea. That is part of a U.S. strategy that includes missile interceptors in California and Alaska.

Ballistic missiles, which differ from cruise missiles because they leave the earth’s atmosphere, can travel distances of up 3,000 km (1,875 miles).

Despite a historic deal between world powers and Tehran to limit Iran’s nuclear program, the West believes Iran’s Revolutionary Guards continue to develop ballistic missile technology, carrying out two tests late last year.

“They are looking for greater distance and accuracy,” said Douglas Barrie, an aerospace defense specialist at the International Institute for Strategic Studies (IISS). “They can still miss by hundreds of meters, but that doesn’t rule out firing against a city or a very large airfield.”

(Reporting by Robin Emmott; Editing by Richard Balmforth)

U.N. investigators tell states to stop Syria war crimes

Journalists and civilians stand near the damage after rockets fired by insurgents hit the al-Dabit maternity clinic in government-held

GENEVA (Reuters) – States backing Syria’s peace process must stop the warring parties from attacking unlawful targets such as hospitals and other civilian sites, U.N. war crimes investigators said in a statement on Wednesday.

Air strikes, shelling and rocket fire had been consistently used in recent attacks on civilian areas, the U.N. Commission of Inquiry on Syria said in a statement.

“Failure to respect the laws of war must have consequences for the perpetrators,” its chairman, Paulo Pinheiro, said.

“Until the culture of impunity is uprooted, civilians will continue to be targeted, victimized and brutally killed.”

International law requires all parties to the conflict to distinguish between lawful and unlawful targets, but that distinction had been ignored and some recent attacks had been war crimes, the statement said.

It cited an attack on the al-Quds hospital in Aleppo governorate on April 27 and other attacks on nearby medical facilities, and air strikes on markets, bakeries and a water station, as well as the May 5 attack on a refugee camp in Idlib.

Those attacks all happened after a two-month ceasefire, brokered by Russia and the United states, unraveled, and Syrian government forces said they would launch an assault to recapture rebel-held areas of Aleppo.

The statement did not explicitly attribute blame for attacks on civilians, but only Syria’s government and its ally Russia are using aircraft in the conflict.

U.N. High Commissioner for Human Rights, Zeid Ra’ad al-Hussein, said last week that initial reports suggested Syrian government aircraft were responsible for the attack on the refugee camp in Idlib governorate, which killed about 30 people. Syria’s military said they had not targeted the camp.

(Reporting by Tom Miles; Editing by Louise Ireland)

Syrian military deny targeting camps, U.N condemns ‘murderous attacks’

People walk though burned tents at a camp for internally displaced people near

BEIRUT/GENEVA (Reuters) – The Syrian military denied it had conducted air strikes on camps near the Turkish border on Thursday which killed at least 28 people, but the U.N. human rights chief said initial reports suggested a government plane was responsible.

The death toll from attack on the camp for internally displaced people near the town of Sarmada included women and children, the Syrian Observatory for Human Rights said, and could rise further because many people were seriously wounded.

“There is no truth to reports … about the Syrian air force targeting a camp for the displaced in the Idlib countryside”, the Syrian military said in a statement on Friday carried by state media.

U.N. High Commissioner for Human Rights Zeid Ra’ad al Hussein said the attacks were almost certainly a deliberate war crime.

“Given these tent settlements have been in these locations for several weeks, and can be clearly viewed from the air, it is extremely unlikely that these murderous attacks were an accident,” Zeid said in a statement.

“My staff, along with other organizations, will leave no stone unturned in their efforts to research and record evidence of what appears to be a particularly despicable and calculated crime against an extremely vulnerable group of people,” he said.

“Initial reports suggest the attacks were carried out by Syrian Government aircraft, but this remains to be verified.”

Footage shared on social media showed rescue workers putting out fires which still burned among charred tent frames, pitched in a muddy field. White smoke billowed from smoldering ashes, and a burned and bloodied torso could be seen.

Sarmada lies about 30 km (20 miles) west of Aleppo, where a cessation of hostilities brokered by Russia and the United States had brought a measure of relief on Thursday.

Zeid said most of the people in the camps had been forced to flee their homes in Aleppo in February because of sustained aerial attacks there.

He said he was also alarmed about the situation in Syria’s Hama central prison, where detainees had taken control of a section of the prison and were holding some guards hostage.

“Heavily armed security forces are surrounding the prison and we fear that a possibly lethal assault is imminent. Hundreds of lives are at stake, and I call on the authorities to resort to mediation, or other alternatives to force,” Zeid said.

He urged governments on the U.N. Security Council to refer Syria to the International Criminal Court so that there is “a clear path to punishment for those who commit crimes like these”.

(Reporting by John Davison in Beirut and Tom Miles in Geneva; Editing by Gareth Jones and Dominic Evans)

U.S., Russia agree to extend truce to Aleppo

Residents walk near damaged buildings in the rebel held area of Old Aleppo

By Lesley Wroughton

WASHINGTON (Reuters) – The United States said on Wednesday it had agreed with Russia to extend a cessation of hostilities agreement to include Aleppo where intense day-long violence between Syrian rebels and government forces killed dozens of people.

The State Department said the truce went into effect at 12:01 a.m. Damascus time on Wednesday, but acknowledged the fighting had not stopped.

U.S. Secretary of State John Kerry said he was not surprised that fighting continued in some areas, adding both sides were working to communicate with commanders in the field.

Kerry, meeting with EU foreign policy chief Federica Mogherini at the State Department, said it was vital that both sides abide by the agreement. He called on Russia to use its influence over President Bashar al-Assad to stop the violence.

There was no immediate response from Moscow to the announcement of an agreement, but the Syrian army said it would implement a “regime of calm” in Aleppo for 48 hours as of Thursday.

The surge in bloodshed in Aleppo, Syria’s largest city before the civil war and biggest strategic prize, wrecked the first major “cessation of hostilities” agreement of the war, sponsored by Washington and Moscow, which had held since February.

In battles on Wednesday between rebels and government forces in western Aleppo, opposition forces said they were forced to retreat by heavy aerial bombing.

Russia’s U.N. ambassador, Vitaly Churkin, addressing a U.N. Security Council meeting on the situation in Aleppo, said an agreement would have been announced on Tuesday but opposition attacks in Aleppo had prevented it from happening.

“The deterioration in certain areas of Syria, including Aleppo, is a serious source of concern. The government forces are fighting off a large-scale offensive by the jihadists (in Aleppo),” he told the council.

STRENGTHENED MONITORING

Kerry said the United States was coordinating closely with Russia to finalize strengthened monitoring of the extension of the cessation of hostilities to Aleppo.

He said he expected a meeting of the International Syrian Support Group, a grouping of foreign ministers of European and Middle Eastern government chaired by Kerry and Russian Foreign Minister Sergei Lavrov, to meet within the next two weeks.

In Berlin, the German and French foreign ministers said achieving a ceasefire in Aleppo was critical to renewing peace talks.

“I believe everyone knows and can conclude that there could be no return to the political talks in Geneva if a ceasefire in and around Aleppo is not observed,” German Foreign Minister Frank-Walter Steinmeier told reporters.

In Geneva, a senior U.N. humanitarian official said the Syrian government was refusing U.N. demands to deliver aid to hundreds of thousands of civilians trapped by the fighting, including many in devastated Aleppo.

The Syrian Observatory for Human Rights said dozens had been killed on both sides in what it described as the most intense battle in the Aleppo region in a year. Government forces were reinforced by allies from Lebanon’s Hezbollah, it said.

A rebel fighter said about 40 government soldiers had been killed, while rebel losses stood at 10 dead. A military source denied there had been heavy casualties in army ranks, but said dozens of civilians and many rebels had been killed.

Rebel sources said insurgents at one point captured a strategic location known as Family House, but later lost it after the government side sent in reinforcements.

A pro-government military strategist said the offensive failed to breach key army defense and supply lines in Aleppo.

During the Security Council meeting, U.N. political chief Jeffrey Feltman said a consolidated truce and greater humanitarian aid access were needed to ensure the next round of Syria peace talks – set for this month – were credible. Without progress, he said there was a “real risk of a failed political process.”

“The current levels of violence in Aleppo, in particular, negatively impact the ability of the Syrian parties to engage in negotiations,” Feltman said.

U.N. aid chief Stephen O’Brien told the 15-member council that life for the people in Aleppo was horrendous and they were “living under daily threat and terror.”

(Additional reporting by David Alexander in Washington, Tom Perry and Suleiman al-Khalidi in Beirut, Paul Carrel and Joseph Nasr in Berlin and Michelle Nichols at the United Nations; Editing by Peter Cooney)

Russia says will respond to NATO build up in Poland, Baltics

Russian President Putin and Defence Minister Shoigu attend a wreath laying ceremony to mark the Defender of the Fatherland Day at the Tomb of the

MOSCOW (Reuters) – Russia will be forced to take retaliatory measures if NATO deploys four extra battalions in Poland and the Baltic states, Interfax news agency quoted a senior Russian Foreign Ministry official as saying on Wednesday.

“This would be a very dangerous build-up of armed forces pretty close to our borders,” Andrei Kelin, a department head at the ministry, said. “I am afraid this would require certain retaliatory measures, which the Russian Defence Ministry is already talking about.”

Russia will form three new military divisions to counter what it believes is the growing strength of The North Atlantic Treaty Organization (NATO) near its borders, Russian Defence Minister Sergei Shoigu announced on Wednesday.

(Reporting by Jack Stubbs; Writing by Dmitry Solovyov)

Kerry warns Assad of repercussions if truce, transition fails

Journalists and civilians stand near the damage after rockets fired by insurgents hit the al-Dabit maternity clinic in government-held parts of Aleppo city

By Lesley Wroughton

WASHINGTON (Reuters) – U.S. Secretary of State John Kerry warned President Bashar al-Assad on Tuesday of “repercussions” if he does not stick to a ceasefire brokered by Russia and the United States and move forward with a political transition aimed at ending Syria’s war.

But Kerry said he still hoped diplomatic efforts could restore a nationwide Feb. 27 ceasefire to include Aleppo, which has felt the brunt of increased fighting in recent weeks.

“If Assad does not adhere to this, there will clearly be repercussions, and one of them may be the total destruction of the ceasefire and then go back to war,” Kerry told reporters a day after emergency meetings in Geneva.

“I don’t think Russia wants that. I don’t think Assad is going to benefit from that. There may be even other repercussions being discussed,” he added.

It was unclear what Kerry meant by repercussions. Obama administration officials previously warned of consequences for Assad’s action in the country’s long-running civil war, but critics say Washington has failed to follow through with a more aggressive response.

Obama warned earlier in the conflict against the use of chemical weapons by Assad’s forces, setting a red line that would trigger U.S. military action. But he backed away from a threatened bombing campaign.

Kerry said that without a ceasefire in Aleppo, Syria’s largest city before the civil war erupted in 2011, the violence there was in danger of spiraling out of control. The plan now being worked on to ensure a more lasting ceasefire would try to separate rival forces from militias, which are not covered by the ceasefire.

“The line they are trying to draw now would prohibit any kind of incursion of Aleppo, it will not allow Aleppo to fall,” Kerry said. He added that the truce was holding in areas of Damascus and Latakia region where he said there had been a “meaningful” drop in violence.

Kerry said the United States was trying to determine which opposition group was responsible for a rocket attack on a hospital in Aleppo on Tuesday, saying there was no justification for such “horrific violence.”

He repeated the United States would never accept a transition that included Assad.

“If Assad’s strategy is to somehow think he’s going to just carve out Aleppo and carve out a section of the country, I got news for you and for him – this war doesn’t end,” Kerry said.

“It is physically impossible for Assad to just carve out an area and pretend he is somehow going to make it safe while the underlying issues are unresolved in this war.”

(Additional reporting by David Alexander; Editing by Peter Cooney)

Big Breeches found at major email services

A magnifying glass is held in front of a computer screen in this picture illustration taken in Berlin

By Eric Auchard

FRANKFURT (Reuters) a security expert told Reuters.

The discovery of 272.3 million stolen accounts included a majority of users of Mail.r, MAILRq, Russia’s most popular email service, and smaller fractions of Google GO, Yahoo YHOO.O and Microsoft email users, said Alex Holden, founder and chief information security officer of Hold Security.

It is one of the biggest stashes of stolen credentials to be uncovered since cyber attacks hit major U.S. banks and retailers two years ago.

Holden was previously instrumental in uncovering some of the world’s biggest known data breaches, affecting tens of millions of users at Adobe Systems, ADBE., JPMorgan JPM and Target and exposing them to subsequent cyber crimes.

The latest discovery came after Hold Security researchers found a young Russian hacker bragging in an online forum that he had collected and was ready to give away a far larger number of stolen credentials that ended up totaling 1.17 billion records.

After eliminating duplicates, Holden said, the cache contained nearly 57 million Mail.ru accounts – a big chunk of the 64 million monthly active email users Mail.ru said it had at the end of last year. It also included tens of millions of credentials for the world’s three big email providers, Gmail, Microsoft and Yahoo, plus hundreds of thousands of accounts at German and Chinese email providers.

“This information is potent. It is floating around in the underground and this person has shown he’s willing to give the data away to people who are nice to him,” said Holden, the former chief security officer at U.S. brokerage R.W. Baird. “These credentials can be abused multiple times,” he said.

LESS THAN $1

Mysteriously, the hacker asked just 50 rubles – less than $1 – for the entire trove, but gave up the dataset after Hold researchers agreed to post favorable comments about him in hacker forums, Holden said. He said his company’s policy is to refuse to pay for stolen data.

Such large-scale data breaches can be used to engineer further break-ins or phishing attacks by reaching the universe of contacts tied to each compromised account, multiplying the risks of financial theft or reputational damage across the web.

Hackers know users cling to favorite passwords, resisting admonitions to change credentials regularly and make them more complex. It’s why attackers reuse old passwords found on one account to try to break into other accounts of the same user.

After being informed of the potential breach of email credentials, Mail.ru spokeswoman Madina Tayupova told Reuters: “We are now checking, whether any combinations of usernames/passwords match users’ e-mails and are still active.

“As soon as we have enough information we will warn the users who might have been affected,” she said, adding that Mail.ru’s initial checks found no live combinations of usernames and passwords which match existing emails.

A Microsoft spokesman said stolen online credentials was an unfortunate reality. “Microsoft has security measures in place to detect account compromise and requires additional information to verify the account owner and help them regain sole access.”

Yahoo and Google did not respond to requests for comment.

Yahoo Mail credentials numbered 40 million, or 15 percent of the 272 million unique IDs discovered. Meanwhile, 33 million, or 12 percent, were Microsoft Hotmail accounts and 9 percent, or nearly 24 million, were Gmail, according to Holden.

Thousands of other stolen username/password combinations appear to belong to employees of some of the largest U.S. banking, manufacturing and retail companies, he said.

Stolen online account credentials are to blame for 22 percent of big data breaches, according to a recent survey of 325 computer professionals by the Cloud Security Alliance.

In 2014, Holden, a Ukrainian-American who specializes in Eastern European cyber crime threats, uncovered a cache of 1.2 billion unique credentials that marked the world’s biggest-ever recovery of stolen accounts.

His firm studies cyber threats playing out in the forums and chatrooms that make up the criminal underground, speaking to hackers in their native languages while developing profiles of individual criminals.

Holden said efforts to identify the hacker spreading the current trove of data or the source or sources of the stolen accounts would have exposed the investigative methods of his researchers. Because the hacker vacuumed up data from many sources, researchers have dubbed him “The Collector”.

Ten days ago, Milwaukee-based Hold Security began informing organizations affected by the latest data breaches. The company’s policy is to return data it recovers at little or no cost to firms found to have been breached.

“This is stolen data, which is not ours to sell,” said Holden.

(Editing by Mark Trevelyan)