Cybernews Warns of 16 Billion Leaked Passwords: Why You Must Improve Your Cyber Hygiene
- Sean G
- Jun 21
- 2 min read
In a jaw-dropping revelation, cybersecurity outlet Cybernews has uncovered one of the largest credential caches in history: around 16 billion usernames and passwords shared across 30 exposed datasets—some held briefly on unsecured servers before being taken offline .
Because this data comes from multiple breaches over time—likely captured by infostealer malware—it isn’t a single corporate hack, but an alarming aggregation of old and fresh credentials targeting Google, Facebook, Apple, Telegram, GitHub, and more .
Cybercriminals can use these credentials for account takeovers, identity theft, targeted phishing campaigns, and even bypass two-factor authentication using session tokens .
⚠️ What You Must Do Now
Experts unanimously stress the urgent need for better password hygiene and security practices:
Change your passwords immediately, and ensure each account uses a unique, strong password .
Use a password manager or passkeys to eliminate reuse and help generate complex credentials .
Enable multifactor authentication (MFA), preferably with app-based or hardware authenticators—not SMS—to thwart account takeover attempts .
Check for compromised accounts via services like “Have I Been Pwned” or built-in browser tools that detect leaked credentials .
Clean your devices: Run antivirus/malware scans to remove any infostealer programs before creating new credentials .
Why This Leak Is So Dangerous
With 16 billion credentials—twice the global population—many users had multiple accounts exposed .
Infostealer-generated data often includes session tokens and cookies, enabling hackers to impersonate users—even if passwords are changed .
These datasets were fleeting but enough for criminal syndicates to use them as a blueprint for mass exploitation .
Cybersecurity authorities warn that this isn’t a one-time wake-up call—but a clear sign that digital hygiene standards among global users remain dangerously low.
The sheer scale and sophistication of this breach highlight one immutable truth: Good cyber hygiene saves you. By using unique passwords, enabling MFA, and monitoring your credentials, you can protect your accounts from the fallout of this unprecedented leak.
Comments