Cybersecurity researchers from Cybernews have identified 30 datasets containing a total of 16 billion compromised login credentials.

This finding was detailed in a report released this week. The leaked data includes passwords for major platforms such as Google, Facebook, and Apple.

Cybernews noted that the datasets may contain duplicates, making it unclear how many unique accounts or individuals were affected.

The number of exposed credentials is about double the global population. This indicates that many individuals may have had multiple accounts compromised.

The data is believed to result from multiple breaches over time rather than a single incident. Researchers found the datasets during a brief period when the information was publicly accessible.

The breaches are thought to have been facilitated by infostealers, a type of malware designed to extract sensitive data from devices. It is uncertain who currently possesses the leaked login information. Experts stress the importance of robust cybersecurity practices.

This includes regularly updating passwords, using unique credentials for different accounts, and enabling multifactor authentication.

🔗 Source: Associated Press

🧠 Food for thought

1️⃣ Historical breach growth signals exponential acceleration in credential theft

The discovery of 16 billion leaked credentials marks a dramatic escalation compared to historical breach volumes over the past decade.

In 2019, researchers documented 5,183 breaches exposing 7.9 billion records total for the entire year, less than half of what’s been found in this single collection 1.

This reflects a pattern of escalating breach sizes: from the 145.5 million records in the 2017 Equifax breach to Collection #1 in 2019 with 773 million records, and now to this massive 16 billion credential compilation 21.

The trend shows not just more frequent breaches but increasingly systematic collection and organization of stolen credentials, creating what security experts call “combo lists” that compile multiple breaches into searchable databases.

Each major breach contributes to a compounding effect as cybercriminals build larger, more comprehensive databases of credentials that become increasingly valuable for criminal enterprises.

2️⃣ Infostealer malware democratizes cybercrime through commercialization