Historic breach: 16 bln passwords leaked from Apple, Google and Facebook
Billions of passwords leaked online (photo: Freepik)
According to experts from Cybernews, a database containing an unprecedented 16 billion accounts with passwords has been discovered online. Forbes reports that this is the largest credential leak in history.
What happened
As part of an investigation that has been ongoing since early 2024, researchers uncovered 30 separate data sets, each containing tens of millions to more than 3.5 billion records.
Among the compromised data are logins and passwords from social networks, VPN services, developer platforms, and accounts from Apple, Google, Facebook, GitHub, Telegram, and even government resources.
Almost all the information had not appeared in previous leaks. The only exception is an already known database containing 184 million records.
As the researchers emphasize, this is not just another "repackaging" of old data; it is fresh and potentially dangerous information that can already be used for phishing attacks, account hacking, and even access to confidential services.
Experts say these data represent a weapon of mass hacking. The leak format includes a URL, login, and password, which provides access to virtually any online service.
What experts say
According to cybersecurity experts, such leaks underscore that today, protecting accounts is not just the responsibility of IT departments but also a personal duty for every user.
"Organisations need to do their part in protecting users. And people need to remain vigilant and mindful of any attempts to steal login credentials," notes Javvad Malik, a specialist at KnowBe4.
How to protect your accounts
- Change passwords on all your key services
- Use password managers—they help create and store secure combinations
- Switch to passkeys—they are considered a more secure alternative to traditional passwords
- Be cautious with suspicious SMS and email messages—most attacks begin with phishing
The leak affecting 16 billion records is a wake-up call for all internet users. If you haven't taken cybersecurity seriously, now is the best time to start.
