A staggering 16 billion login credentials have been exposed online in what is shaping up to be one of the largest and most concerning data leaks to date. The discovery was made by a cybersecurity research team that has been tracking suspicious activity and open databases across the web since early 2025. The exposed datasets contain usernames, passwords, session tokens, cookies, and other sensitive authentication information gathered through infostealer malware, credential stuffing, and reproc
A staggering 16 billion login credentials have been exposed online in what is shaping up to be one of the largest and most concerning data leaks to date. The discovery was made by a cybersecurity research team that has been tracking suspicious activity and open databases across the web since early 2025. The exposed datasets contain usernames, passwords, session tokens, cookies, and other sensitive authentication information gathered through infostealer malware, credential stuffing, and reproc