‘Mother of all breaches’: 16 Billion records exposed in mega data leak

In a shocking revelation, security researchers have uncovered one of the largest data breaches in history, unveiling a staggering collection of more than 16 billion records. This extensive leak, detailed in a recent report by Cybernews, has been traced across 30 different databases, each compiled through various strains of infostealer malware. These malicious programs, typically utilized by cybercriminals and occasionally by ethical hackers for investigative purposes, are adept at extracting sensitive user information from compromised devices. The enormity of this leak is unprecedented; while some datasets are modest, with only a few million records, others contain billions of entries. The leaked information includes credentials from major platforms like Google, Apple, GitHub, Telegram, and various VPN services. Alarmingly, among the 30 datasets, only one—comprising 184 million records—had been previously reported in the media. Researchers pointed out that this particular database “barely scratches the top 20” of the total findings, indicating a vast amount of sensitive information still unaccounted for. This incident highlights a concerning trend, as researchers note that significant data breaches are increasingly becoming a routine occurrence. “New giant datasets emerge every few weeks,” they warned, drawing attention to the escalating threat posed by infostealer malware and inadequate data security measures. Though the exposed databases were accessible to the public for a limited time before being secured, the identities of those who uploaded or managed the data remain unclear. Additionally, it's challenging to determine the exact number of individuals affected, as many records may overlap or contain duplicates. With an estimated 5.5 billion people online globally, the data suggests that a substantial portion of the internet-using population may have had multiple accounts jeopardized. Security experts are urging businesses and institutions to strengthen their cybersecurity protocols and conduct regular assessments of their digital infrastructures to avert similar breaches in the future.