Overview
- Cybernews researchers identified 30 stolen datasets totaling about 16 billion credentials, first reported on June 18 and now under investigation.
- Breached records span major platforms like Apple, Google and Telegram, government services and include a 3.5 billion-record set tied to Portuguese-language users.
- The data was amassed over time by stealth infostealer malware rather than a single leak, making it hard to isolate the exact number of unique victims due to duplicate entries.
- Experts recommend individuals check exposure through tools such as ‘Have I Been Pwned’ and urge organizations to adopt multi-factor authentication and regular password rotation.
- Authorities are probing the breach’s scope to curb further misuse of credentials for targeted phishing, identity theft and unauthorized account takeovers.