16B passwords leaked online; Apple, Facebook, and Google users affected

16B passwords leaked online; Apple, Facebook, and Google users affected
20 Jun 2025

A massive data breach has exposed a staggering 16 billion login credentials, including passwords.

The leak is being investigated by researchers who believe it was caused by multiple infostealers.

The compromised records include details from social media accounts, VPNs, developer portals, and user accounts of major vendors like Apple, Facebook, Google, and GitHub.

Leaded credentials could be used for phishing attacks
Security concerns

The 16 billion record leak is stored in massive datasets and is believed to be the largest such incident ever.

The researchers who discovered it said, "This is not just a leak - it's a blueprint for mass exploitation."

They also warned that these credentials could be used for phishing attacks and account takeovers.

Incident highlights need for password management solutions
Cybersecurity awareness

Darren Guccione, CEO and co-founder of Keeper Security, emphasized that this incident serves as a reminder of how easily sensitive data can be exposed online.

He stressed the importance of investing in password management solutions and dark web monitoring tools to alert users when their login credentials have been compromised.

Organizations are also advised to adopt zero-trust security models with privileged access controls to limit risks.

Using multi-factor authentication is important
Collective duty

Javvad Malik, lead security awareness advocate at KnowBe4, stressed that "organizations need to do their part in protecting users," while individuals must be cautious of attempts to steal login credentials.

He advised using strong and unique passwords, and enabling multi-factor authentication wherever possible.

The incident highlights that cybersecurity is not just a technical challenge but a collective responsibility.