Massive leak of 16 billion Apple, Google and Facebook passwords in one of the biggest data breaches in history

An unprecedented security breach shakes the global digital landscape

The biggest password leak in history has come to light: more than 16 billion credentials (users, keys, cookies, tokens) are circulating freely on the internet, exposed in more than 30 unprotected databases.

The most alarming thing: This is not old data, but rather from recent information, collected through malware such as Infostealer, in a structured way ready to be exploited by cybercriminals.

‍

Affected platforms and immediate risks

Potentially compromised services include:

• Apple, Google and Facebook
• Telegram, GitHub, government services and digital banking platforms
• Personal, business and administrative accounts

This opens the door to a new wave of:

• Hyperpersonalized phishing attacks
• Impersonation and account hijacking
• Illegitimate access to corporate systems

‍

Why is this leak different?

Unlike previous breaches focused on specific services, this gap:

• Reunite data from millions of people and companies.
• It is organized in databases accessible from forums and dark web.
• It includes not only passwords, but also session tokens, active cookies and browser histories.

In the words of Cybernews researchers:”It is a map ready to be used in automated mass attacks“

‍

Immediate recommendations for users and businesses

If you suspect that you may be affected, act now with these best practices:

1. Change all your critical passwords (email, banking, social networks).
2. Enable Multifactor Authentication (MFA) on every possible platform.
3. Use a password manager to create and store secure and unique keys.
4. Enable passkeys on compatible services such as Apple and Google.
5. Monitor if your email has been compromised with tools such as Have I Been Pwned.
6. Educate your teams in cyberhygiene and the detection of phishing attacks.

‍

Conclusion: It's not a one-off alert, it's a call for change

This massive leak isn't just another breach. It's a an unequivocal sign that traditional security mechanisms are no longer sufficient. Protecting our credentials and actively managing our digital identity is now both an individual and a corporate priority.

🚀 Protect your accounts now!

At Apolo Cybersecurity we help organizations and individuals to anticipate these types of threats with adapted identity protection solutions, security audits and tailor-made training.

Write to us at info@apolocybersecurity.com so you can identify vulnerabilities in your system before it's too late.

‍