Cybernews security investigators recently found that roughly 16 billion login credentials, including usernames and passwords connected to major online services such as Apple, Google, Facebook, and over thirty other platforms, have been exposed online. This disclosure has prompted urgent calls worldwide for users to change their passwords and activate two-factor authentication to protect their accounts.
According to the report, the compromised information was scattered across at least 30 different databases, all of which were temporarily accessible to the public before being taken offline. Approximately 85% of this data is believed to have been gathered through infostealer malware, while the remaining portion originates from historic data breaches.
Though there was no single centralized breach affecting these major companies directly, organizations like Google, Apple, and Meta (Facebook) have confirmed that their systems were not directly hacked. Security expert Bob Diachenko emphasized, "There is no indication that technology companies have experienced a centralized breach," clarifying that it is the aggregation of data from various sources that has led to the scale of this incident.
The leaked datasets were detected shortly before being removed, but remained accessible long enough for cybercriminals to copy the data. Agencies such as the FBI and other cybersecurity organizations have issued warnings urging caution against suspicious links and phishing attempts via SMS or email.
Experts recommend that users take concrete steps to safeguard their digital identities, including utilizing password managers, enabling two-factor authentication, and transitioning to passkey technologies. To check if your data has been compromised, free services like Have I Been Pwned are available.
Responses