Published on June 25, 2025. EST READ TIME: 2 minutes
A major data exposure has come to light as Cybernews identified 30 publicly accessible databases containing nearly 16 billion login credentials. The entries link to major platforms including Google, Facebook, Apple, Telegram, GitHub, and several government portals. While a large portion of the data appears to be recycled from older breaches, researchers have confirmed the inclusion of recent logs collected by infostealer malware. This combination of outdated and fresh credentials makes the dump especially dangerous, offering cybercriminals access to passwords, tokens, and session cookies that can be used for large scale phishing and fraud campaigns. Experts warn that users with weak or reused passwords remain highly vulnerable. Security professionals recommend enabling multifactor authentication, avoiding password reuse, using a trusted password manager, and regularly updating login credentials. Although no new corporate breach has been reported, this discovery underlines the persistent threat posed by neglected or compromised digital hygiene.