16 billion passwords leaked, raises crypto security fears

Technology
24 Jun 2025 • 9:00 AM MYT
Ashley
Ashley

Writing news so you don't have to scroll 3 hours for the plot

Image from: 16 billion passwords leaked, raises crypto security fears
Photo by Mika Baumeister on Unsplash

According to security researchers, 16 billion passwords from 30 databases, including Apple, Facebook, Google, and other social media platforms, as well as government services, have been leaked.

Reports call them the mother of all data breaches, and it may as well be the largest data breach.

Researchers from Cybernews stated the data was stored in a common infostealer malware format that attempts to steal data from an infected device, which has been a massive worldwide issue over the years.

“It’s not just a leak – it’s a blueprint for mass exploitation,” said researchers. “These aren’t old breaches being recycled. This is fresh, weaponizable intelligence at scale.”

The good news is, these datasets were only exposed momentarily, giving researchers enough time to uncover them.

However, it was not exposed long enough to find the culprit who was controlling these billions of data.

Through that brief exposure, researchers were able to reveal that all the information followed a clear structure: a URL followed by users’ login details and their passwords. This is the most common way infostealers collect data.

In the past, we’ve seen similar password and data leaks, such as the ‘RockYou2024’ leak, which had over 9 billion records and the ‘Collection #1’ leak, which had 22 million passwords.

Now, there’s a massive leak, and you’re worried about your data being stolen. What should you do?

Most importantly, the first step is to ensure your device is clean. Scan your device with a trusted antivirus program before changing all your passwords.

Once your device is clean, change your passwords. Make sure they’re unique, strong and have variation for every platform.

But sometimes having a strong password isn’t enough.

Therefore, a two-factor authentication (2FA) is needed, like the Microsoft and Google authenticator. This ensures that the user can not access the account unless verified with a unique code generated from the authenticator.

So, if you’re using the same password over and over on multiple sites, take this as the time to change them to unique ones.


Ashley (ashleychenqy2204@gmail.com) is a content creator under the Newswav Creator programme, where you get to express yourself, be a citizen journalist, and at the same time monetize your content & reach millions of users on Newswav. Log in to creator.newswav.com and become a Newswav Creator now!

The User Content (as defined on Newswav Terms of Use) above including the views expressed and media (pictures, videos, citations etc) were submitted & posted by the author. Newswav is solely an aggregation platform that hosts the User Content. If you have any questions about the content, copyright or other issues of the work, please contact creator@newswav.com.