Internet users are urged to change their passwords immediately following the discovery of 16 billion login records that were briefly exposed on remote servers. This massive trove of credentials, harvested from “infostealers” and previous data breaches, includes access details for major services like Facebook, Apple, and Google, raising significant security concerns.
The online tech publication Cybernews, which brought this to light, clarified that these companies themselves weren’t directly breached. Instead, the exposed data represents a compilation of information already compromised through various illicit means. The temporary nature of the exposure is a small comfort, but the sheer scale highlights the constant threat posed by cybercriminals.
Bob Diachenko, the Ukrainian cybersecurity expert behind the discovery, successfully downloaded the files and is now working to contact the vast number of individuals and organizations impacted. This arduous process underscores the unprecedented volume of sensitive information now known to be in circulation.
Security experts are united in their advice: this incident serves as a critical reminder to adopt robust digital security practices. Regularly updating passwords, enabling multifactor authentication, using reliable password managers, and being vigilant against phishing attempts are all essential steps to safeguard your online identity in the face of such pervasive threats.

