Overview

• The breach comprises 30 exposed datasets containing from tens of millions to over 3.5 billion records each, totaling 16 billion entries across services including Apple, Google, Facebook, GitHub, Telegram and government portals.
• Researchers attribute the leak to infostealer malware that siphoned credentials directly from infected devices and unsecured storage, organizing data as URL, username and password.
• Security analysts warn that most of the harvested data is fresh rather than recycled from old breaches, giving cybercriminals ready-made material for phishing, identity theft and account takeover.
• Overlap among datasets makes the number of unique victims unclear, with the largest batches linked to Portuguese-speaking users, Russian logins and Telegram credentials.
• In response, Google is pushing passkeys, the FBI advises against clicking suspicious links, and experts recommend prompt password resets, two-factor authentication and use of password managers.