Cybersecurity researchers at Cybernews report that billions of login credentials have been exposed and collected into datasets available online.
Billions of Login Credentials Leaked, Say Cybernews Researchers
Cybersecurity experts at Cybernews have reported a massive leak of login credentials, potentially granting cybercriminals unprecedented access to everyday consumer accounts. In a new report published this week, researchers revealed the discovery of 30 publicly exposed datasets containing a staggering 16 billion compromised credentials.
These leaked credentials include usernames and passwords for major platforms such as Google, Facebook, and Apple. With the number far exceeding the world’s population, researchers believe many users had multiple accounts affected. However, duplicate entries in the data mean it’s difficult to determine how many individuals or accounts were actually compromised.
Crucially, this breach doesn’t originate from a single cyberattack. Instead, the data appears to have been collected from multiple breaches over time, later aggregated and temporarily made public—at which point Cybernews researchers identified it.
According to the report, the breach is likely the result of infostealers—a type of malicious software designed to infiltrate systems and extract sensitive data like login information.
While the exact parties in possession of the leaked credentials remain unknown, the incident underscores the growing threat of large-scale data leaks. As these events become more frequent, cybersecurity experts are urging individuals to practice good cyber hygiene.
If you suspect your data may have been compromised, here are key steps to protect yourself:
- Immediately update your passwords, especially for critical accounts.
- Avoid reusing passwords across multiple platforms.
- Use a password manager or passkey to securely store and generate strong, unique passwords.
- Enable multifactor authentication (MFA) to add an extra layer of protection via phone, email, or a security key.