In what may be the biggest data breach in internet history, security researchers have uncovered 30 datasets containing a combined 16 billion login credentials.
Author: Sahil Thakur
In what may be the biggest data breach in internet history, security researchers have uncovered 30 datasets containing a combined 16 billion login credentials, including email addresses, passwords, and login URLs for major services like Apple, Facebook, Google, GitHub, Telegram, and even government platforms.
The revelation, first reported by Cybernews, follows an earlier May 2025 disclosure of a 184 million-record password leak. However, that now appears to have been only the tip of the iceberg.
Cybernews investigators describe the exposure as “not just a leak — it’s a blueprint for mass exploitation.” Unlike older breaches that resurface over time, researchers say these datasets contain largely new, unreported data, likely harvested by a variety of infostealer malware tools.
Each dataset ranges in size, from tens of millions to 3.5 billion records each, with most entries structured as URL, login, and password combinations, providing direct access paths for attackers. The nature of the breach indicates coordinated activity by multiple threat actors, not a single incident.
“These aren’t just old breaches being recycled,” warned Cybernews. “This is fresh, weaponizable intelligence at scale.”
The databases reportedly contain credentials for social media, VPNs, developer tools, and enterprise platforms, making them a high-value target for hackers, nation-states, and ransomware groups. Some of the datasets were available briefly on the open web before being locked down. Their owners remain unknown.
Given the scale, many individuals are likely affected multiple times. With 5.5 billion internet users worldwide and widespread reuse of passwords, the fallout could be disastrous.
“This could be just the tip of the biggest security iceberg waiting to crash into the online world,” said Darren Guccione, CEO of Keeper Security.
Security experts are urging users and organizations to act quickly:
Guccione also advised organizations to adopt zero-trust security models with privileged access controls and regular audit trails. Many companies still fail to secure data stored in cloud environments, often misunderstanding shared responsibility models with cloud service providers.
“Unprotected databases continue to be the most common cause of data leaks,” Cybernews noted.
This mega breach is being viewed as a turning point in cybersecurity. It underscores the urgent need for modern security standards, particularly as credential-based attacks remain the most common and costliest vector.
Researchers say new massive datasets are emerging every few weeks, a trend fueled by rampant infostealer malware and poor database configurations.
Whether you’re an individual or a business, the time to act is now. If your credentials were in this leak—and the odds are not in your favor—they can be used for phishing, identity theft, account takeovers, or worse.
Don’t wait to become a victim. Reset, secure, and stay vigilant.
Our Crypto Talk is committed to unbiased, transparent, and true reporting to the best of our knowledge. This news article aims to provide accurate information in a timely manner. However, we advise the readers to verify facts independently and consult a professional before making any decisions based on the content since our sources could be wrong too. Check our Terms and conditions for more info.
Ledger Probes User Fund Losses Tied to Reseller CryptoBilis
ZachXBT Infiltrated Lazarus Laundering Ring Behind Bybit Hack
Kelsier Ventures As 1,000 Wallets Fell From $300M to $2M in LIBRA
Base Vault Exploit Drains $6M in wstETH Via Whitelist
Ledger Probes User Fund Losses Tied to Reseller CryptoBilis
ZachXBT Infiltrated Lazarus Laundering Ring Behind Bybit Hack
Kelsier Ventures As 1,000 Wallets Fell From $300M to $2M in LIBRA
Base Vault Exploit Drains $6M in wstETH Via Whitelist
