Massive data leak exposes 16 billion login credentials from Google, Facebook, and more
Cybersecurity experts warn of increased phishing and identity theft risks following the discovery of 30 massive leaked datasets.
One of the largest-ever leaks of stolen login data has come to light, exposing more than 16 billion records across widely used services, including Facebook, Google, Telegram, and GitHub. The breach, uncovered by researchers at Cybernews, highlights a growing threat to individuals and organisations.
The exposed data reportedly originated from info stealer malware, previous leaks, and credential-stuffing tools. A total of 30 separate datasets were identified, some containing over 3.5 billion entries.
These were briefly available online due to unsecured cloud storage before being removed. Despite the swift takedown, the data had already been collected and analysed.
Experts have warned that the breach could lead to identity theft, phishing, and account takeovers. Smaller websites and users with poor cybersecurity practices are especially vulnerable. Many users continue to reuse passwords or minor variations of them, increasing the risk of exploitation.
While the leak is severe, users employing two-factor authentication (2FA), password managers, or passkeys are less likely to be affected.
Passkeys, increasingly adopted by companies like Google and Apple, offer a phishing-resistant login method that bypasses the need for passwords altogether.
Would you like to learn more about AI, tech and digital diplomacy? If so, ask our Diplo chatbot!