Major data hack nabs 184M passwords for Google, Apple and more:
By Brooke Steinberg
What is DeepSeek, and how is it used? Inside China's groundbreaking AI service
More than 184 million passwords may have been exposed in a massive data breach that experts are calling a “cybercriminal’s dream.”
According to a new report by cybersecurity researcher Jeremiah Fowler, the leak affected everything from Apple and Google usernames and passwords and social media logins to bank accounts.
The database containing the compromised passwords was ironically unencrypted and not password-protected itself, the report said.
Hacker in dark underground warehouse receiving access denied error message on computer while attempting cyber attack on governmental websites
More than 184 million passwords may have been exposed in a massive data breach.
DC Studio – stock.adobe.com
The publicly accessible database contained 184,162,718 unique logins and passwords reportedly tied to email providers such as Google and a range of Microsoft products, as well as social media platforms like Facebook, Instagram and Snapchat, ZDNet reported.
Fowler shared that information from bank accounts, health services and government portals was also unprotected.
Explore More
AI model threatened to blackmail engineer over affair when told it was being replaced: safety report
Google is now the go-to teacher for adults who need help — with basic 'adulting'
Amazon's Zoox robotaxi unit experiencing a software recall after a collision in San Francisco
Amazon's robotaxi unit faces second software recall in one month following SF collision
The database may have been compiled via infostealer malware, a type of “malicious software designed specifically to harvest sensitive information from an infected system,” according to Fowler. This means that the sensitive information was likely stolen directly from users.
This kind of malware can steal user data that’s stored in web browsers, including autofill data and cookies, data stored in emails, and messaging app data.
Hand holding a mobile phone displaying an incoming call from an unknown caller, indicating a potential spam call.
The publicly accessible database contained millions of unique logins and passwords.
Andri – stock.adobe.com
It’s unclear exactly how the data may have been compromised, but a Snapchat representative told Mashable that they have not found any vulnerability or evidence of a breach on its platform.
After finding the unprotected database, Fowler contacted the hosting provider, which removed it from public access. However, since the provider wouldn’t share the file’s owner, he said that he’s unsure if it was created with a legitimate purpose and accidentally exposed, or if it was used with malicious intent.
To confirm the authenticity of the leaked data, Fowler messaged multiple email addresses listed in the database to confirm that the records had accurate, valid passwords and information.
“Many people unknowingly treat their email accounts like free cloud storage and keep years’ worth of sensitive documents, such as tax forms, medical records, contracts, and passwords without considering how sensitive they are. This could create serious security and privacy risks if criminals were to gain access to thousands or even millions of email accounts,” he wrote.
“From a cybersecurity perspective, I highly recommend knowing what sensitive information is stored in your email account and regularly deleting old, sensitive emails that contain PII, financial documents or any other important files,” he further advised. “If sensitive files must be shared, I recommend using an encrypted cloud storage solution instead of an email.”
Welcome to Billionaire Club Co LLC, your gateway to a brand-new social media experience! Sign up today and dive into over 10,000 fresh daily articles and videos curated just for your enjoyment. Enjoy the ad free experience, unlimited content interactions, and get that coveted blue check verification—all for just $1 a month!
Account Frozen
Your account is frozen. You can still view content but cannot interact with it.
Please go to your settings to update your account status.
Open Profile Settings