Skip to content Skip to sidebar Skip to footer

Huge Password Leak Hits Google, Apple, Facebook, More

A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not
billions.

Late June 2025 was the jaw-dropping moment: cybersecurity outfit Cybernews
uncovered a gigantic stash—30 separate datasets containing anywhere from tens
of millions up to 3.5 billion credentials each, totaling a staggering 16 billion
records. Unlike patched-up leftovers from previous hacks, this is fresh,
weaponizable, and ripe for exploitation.

Who Got Hit—and How Bad?

The dump includes logins for major platforms: Apple, Facebook, Google,
GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint
for mass exploitation”, empowering criminal enterprises to orchestrate
account takeovers, identity theft, ransomware, business email compromise, and
highly targeted phishing campaigns.

Infostealers: The Silent Credential Harvesters

At the heart of this mess are infostealer
malwares—Trojan-style programs installed quietly via phishing, malicious
downloads, pirated software, etc. These harvest not just passwords, but session
cookies, tokens, metadata, browser details and more. Cybercriminal underground markets
buy these stolen logs in bulk (as cheap as $2 per batch), turning them into
lucrative cybercrime campaigns.

What You Should Do Right Now

The Second-Largest Ever Leak?

From the 16 billion number, it’s clear that this breach doesn’t beat
out the “26 billion
records” breach of 2024. But … the numbers haven’t settled yet, and it
appears that these are freshly exploited accounts.

Until a full examination of the datasets takes place, and if it’s even
possible, we just don’t know the final numbers.

What is certain is that this is huge and that it impacts users
across a wide range of the popular digital services, including Google (Gmail,
Android), Apple (i…everything) and good old Facebook.

Final Word

If you’re tech‑savvy — you can’t afford to drag your feet here. Change
passwords now, turn on MFA, and don’t sleep on the risk of phishing or
credential stuffing. Because in the aftermath of 16 billion leaked passwords,
one weak account could set off a domino effect across portfolios, platforms…

For more stories around the edge of tech and finance, visit our Trending pages.

A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not
billions.

Late June 2025 was the jaw-dropping moment: cybersecurity outfit Cybernews
uncovered a gigantic stash—30 separate datasets containing anywhere from tens
of millions up to 3.5 billion credentials each, totaling a staggering 16 billion
records. Unlike patched-up leftovers from previous hacks, this is fresh,
weaponizable, and ripe for exploitation.

Who Got Hit—and How Bad?

The dump includes logins for major platforms: Apple, Facebook, Google,
GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint
for mass exploitation”, empowering criminal enterprises to orchestrate
account takeovers, identity theft, ransomware, business email compromise, and
highly targeted phishing campaigns.

Infostealers: The Silent Credential Harvesters

At the heart of this mess are infostealer
malwares—Trojan-style programs installed quietly via phishing, malicious
downloads, pirated software, etc. These harvest not just passwords, but session
cookies, tokens, metadata, browser details and more. Cybercriminal underground markets
buy these stolen logs in bulk (as cheap as $2 per batch), turning them into
lucrative cybercrime campaigns.

What You Should Do Right Now

The Second-Largest Ever Leak?

From the 16 billion number, it’s clear that this breach doesn’t beat
out the “26 billion
records” breach of 2024. But … the numbers haven’t settled yet, and it
appears that these are freshly exploited accounts.

Until a full examination of the datasets takes place, and if it’s even
possible, we just don’t know the final numbers.

What is certain is that this is huge and that it impacts users
across a wide range of the popular digital services, including Google (Gmail,
Android), Apple (i…everything) and good old Facebook.

Final Word

If you’re tech‑savvy — you can’t afford to drag your feet here. Change
passwords now, turn on MFA, and don’t sleep on the risk of phishing or
credential stuffing. Because in the aftermath of 16 billion leaked passwords,
one weak account could set off a domino effect across portfolios, platforms…

For more stories around the edge of tech and finance, visit our Trending pages.

Leave a comment