16 Billion Passwords Just Got Leaked — Yes, Apple, Facebook & Google Also Kena

Here's what you need to do.

Enlarge text
Cover ImageCover image via New Straits Times & NSTP
Logo

Researchers have uncovered what could be the largest data leak in history: 16 billion login credentials exposed

The leaked login credentials spanned 30 databases, many of which contained recent, structured data harvested by infostealer malware.

"This is not just a leak – it's a blueprint for mass exploitation," said Cybernews researchers.

"With over 16 billion login records exposed, cybercriminals now have unprecedented access to personal credentials that can be used for account takeover, identity theft, and highly targeted phishing."

Image via New Straits Times

The breach wasn't traced to a single hack

Instead, it was traced to a sprawling compilation of fresh infostealer logs, found on unsecured servers.

These datasets include login details for platforms like Apple, Facebook, Google, Telegram, GitHub, and Zoom.

Some even carry cookies and session tokens, meaning attackers could bypass multi-factor authentication entirely.

"This data is particularly dangerous for organisations lacking multi-factor authentication or credential hygiene," warned the Cybernews team.

If you've ever logged into a site, your details could be in one of these troves. Unfortunately, there's no way to know for sure, since the data is a chaotic mix of overlapping records.

Here's what you should do now:

Change your passwords, especially for key services like email, banking, and social media

  • Use a password manager to generate strong, unique passwords
  • Enable 2FA (two-factor authentication) wherever you can
  • Monitor your accounts for unusual activity
  • Run a malware scan to check for infostealers hiding in your system

Follow SAYS Tech on FacebookInstagram, & TikTok for the latest in tech in Malaysia and the world!

Read more #tech stories:

Read more #tech stories:
Read more trending stories on SAYS

You may be interested in: