Record Data Breach Leaks 16 Billion Passwords, Threatening Major Online Services
June 20, 2025 – In what cybersecurity experts are calling the largest password leak in history, over 16 billion login credentials have been exposed in a sprawling data breach that affects nearly every major online platform—including Apple, Google, Facebook, Telegram, and even government portals.
The breach, uncovered by researchers at Cybernews, consists of 30 separate datasets, each containing tens of millions to over 3.5 billion records. The leaked data includes usernames, passwords, and URLs, many of which are still valid and exploitable, making this a blueprint for mass exploitation, according to analysts.
Not Just Old Data
Unlike recycled leaks from previous years, this breach contains fresh, structured data—much of it harvested by infostealer malware that silently collects credentials from infected devices. The stolen information is already circulating on the dark web, where it can be used for account takeovers, identity theft, and targeted phishing attacks.
“This isn’t just a leak—it’s a loaded weapon,” said Vilius Petkauskas, lead researcher at Cybernews. “The scale and recency of these datasets make them incredibly dangerous.”
Who’s at Risk?
The breach affects a wide range of services, from social media and VPNs to developer platforms and enterprise tools. Experts warn that anyone who reuses passwords across multiple accounts is especially vulnerable to credential stuffing attacks, where hackers try the same login on different platforms.
What You Should Do Now
Security professionals urge users to take immediate action:
- Change your passwords, especially for critical accounts like email, banking, and cloud storage.
- Enable two-factor authentication (2FA) wherever possible.
- Use a password manager to generate and store strong, unique passwords.
- Check if your credentials have been compromised using tools like .
A Wake-Up Call for the Digital Age
This breach underscores the growing threat posed by infostealer malware and the urgent need for proactive cybersecurity practices. As more of our lives move online, experts say both individuals and organizations must treat password hygiene as a top priority—not an afterthought.
