Massive data breach exposes billions of Google, Facebook, Apple passwords

Cybernews researchers have discovered 16 billion stolen login credentials compiled from 30 data breaches, potentially exposing accounts on platforms like Google and Facebook. Experts recommend changing passwords, using MFA, and adopting password managers to reduce vulnerability to cyberattacks

New York: Researchers at cybersecurity outlet Cybernews have discovered that billions of login credentials have been leaked and compiled into datasets available online, potentially giving cybercriminals “unprecedented access” to consumer accounts used daily.

In a report published this week, Cybernews revealed that researchers recently found 30 exposed datasets, collectively containing over 16 billion compromised credentials. These include passwords linked to popular platforms such as Google, Facebook, and Apple.

---

To put the breach into perspective, 16 billion credentials is roughly double the Earth’s current population, suggesting that many individuals had multiple accounts compromised. Cybernews cautioned that many entries are likely duplicates, making it impossible to determine exactly how many users were affected.

Importantly, the breach does not stem from a single data leak. Instead, it appears to be the result of multiple breaches that occurred over time. The datasets were briefly exposed publicly, at which point Cybernews researchers identified and analyzed the compilation.

The primary culprits are likely infostealers — malicious software designed to infiltrate systems and steal sensitive data. While it remains unclear who currently controls the exposed data, cybersecurity experts are urging the public to practice strong cyber hygiene.

They advise users to: Change passwords immediately, avoid reusing the same password across platforms, use password managers or passkeys, and enable multi-factor authentication (MFA) for added security.