World’s biggest data breach: 16 billion Apple, Facebook, Google passwords leaked
A massive data breach has exposed more than 16 billion login credentials tied to major platforms, including Apple, Facebook, Google, and various US government services, cybersecurity experts have revealed.
Described as the most significant data leak in history, the breach has triggered urgent warnings from Google and the FBI, with users urged to immediately update their passwords and avoid suspicious SMS links.
Cybernews investigators uncovered 30 separate datasets, each containing tens of millions to over 3.5 billion records. Many of these datasets include never-before-seen credentials, making this breach especially dangerous.
Sign up to The Nightly's newsletters.
Get the first look at the digital newspaper, curated daily stories and breaking headlines delivered to your inbox.
By continuing you agree to our Terms and Privacy Policy.The team at Cyber News has been closely monitoring the web since the beginning of the year. So far, they’ve discovered 30 exposed datasets containing from tens of millions to over 3.5 billion records each. In total, the researchers uncovered an unimaginable 16 billion records.
“This is not just a leak – it’s a blueprint for mass exploitation,” researchers told Forbes.
The leaked information mainly comprises URLs paired with usernames and passwords — enough, experts warn, to gain access to nearly any online account, from GitHub and Telegram to federal services.
The data briefly surfaced online before disappearing, leaving investigators unable to trace its source.
Experts believe the breach is linked to multiple “infostealer” malware operations, which harvest credentials from infected devices.
Cybersecurity professionals are urging users to:
- Change all passwords immediately
- Use a secure password manager
- Avoid reusing credentials across platforms
- Watch for suspicious login activity
The breach is expected to drive a surge in phishing scams and account takeovers in the coming weeks.
