A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not billions.
Apple, Google, Facebook—The Leak That Broke the Scale
Late June 2025 was the jaw-dropping moment: cybersecurity outfit Cybernews uncovered a gigantic stash—30 separate datasets containing anywhere from tens of millions up to 3.5 billion credentials each, totaling a staggering 16 billion records. Unlike patched-up leftovers from previous hacks, this is fresh, weaponizable, and ripe for exploitation.
🚨 BREAKING: 16 BILLION PASSWORDS LEAKED: APPLE, GOOGLE, FACEBOOK USERS EXPOSED
— Mario Nawfal (@MarioNawfal) June 19, 2025
What’s being called the largest password leak in history has just been confirmed: 16 billion login credentials, many from major platforms like Apple, Google, Facebook, GitHub, and more, are now… pic.twitter.com/2Sxod46Hha
Who Got Hit—and How Bad?
The dump includes logins for major platforms: Apple, Facebook, Google, GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint for mass exploitation,” empowering criminal enterprises to orchestrate account takeovers, identity theft, ransomware, business email compromise, and highly targeted phishing campaigns.
Infostealers: The Silent Credential Harvesters
At the heart of this mess are infostealer malwares—Trojan-style programs installed quietly via phishing, malicious downloads, pirated software, etc. These harvest not just passwords, but session cookies, tokens, metadata, browser details and more. Cybercriminal underground markets buy these stolen logs in bulk (as cheap as $2 per batch), turning them into lucrative cybercrime campaigns.
16 billion passwords have been leaked from Apple, Google, Facebook, etc
— Dexerto (@Dexerto) June 19, 2025
It is now considered as the largest password leak in history pic.twitter.com/32jiBO6yUN
What You Should Do Right Now
Action | Why It Matters |
|---|---|
| Change passwords now | Especially for Apple, Facebook, Google—any reused everywhere else |
| Use a password manager | Generates strong, unique credentials per service |
| Enable MFA | Adds a critical layer that infostealers can't bypass |
| Watch for phishing & account alerts | Operators may attempt follow-up attacks with the harvested data |
| Use breach-check tools | Services like Have I Been Pwned or Cybernews leak searchers can alert you to exposure |
Action | Why It Matters |
|---|---|
| Change passwords now | Especially for Apple, Facebook, Google—any reused everywhere else |
| Use a password manager | Generates strong, unique credentials per service |
| Enable MFA | Adds a critical layer that infostealers can't bypass |
| Watch for phishing & account alerts | Operators may attempt follow-up attacks with the harvested data |
| Use breach-check tools | Services like Have I Been Pwned or Cybernews leak searchers can alert you to exposure |
The Second-Largest Ever Leak?
From the 16 billion number, it’s clear that this breach doesn’t beat out the “26 billion records” breach of 2024. But… the numbers haven’t settled yet, and it appears that these are freshly exploited accounts.
Until a full examination of the datasets takes place, and if it’s even possible, we just don’t know the final numbers.
What is certain is that this is huge and that it impacts users across a wide range of the popular digital services, including Google (Gmail, Android), Apple (i…everything) and good old Facebook.
To check if you're safe from the reported 16 billion password leak, visit Have I Been Pwned? or CyberNews Password Leak Checker to see if your credentials were exposed. If affected, change your passwords immediately to strong, unique ones and enable two-factor authentication…
— Grok (@grok) June 19, 2025
Final Word
If you're tech‑savvy—you can't afford to drag your feet here. Change passwords now, turn on MFA, and don’t sleep on the risk of phishing or credential stuffing. Because in the aftermath of 16 billion leaked passwords, one weak account could set off a domino effect across portfolios, platforms...
For more stories around the edge of tech and finance, visit our Trending pages.