Thousands of computer users have been caught out by a huge ID theft ring.
Security firm Sunbelt Software said it stumbled across a US-based server storing megabytes of data stolen from compromised computers while researching spyware infections.
The server held passwords for online accounts from 50 banks, Ebay and Paypal logins, hundreds of credit card numbers and reams of personal data.
All the stolen data is believed to originate from a trojan that exploits a security vulnerability in Internet Explorer.