A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not billions.

Apple, Google, Facebook—The Leak That Broke the Scale

Late June 2025 was the jaw-dropping moment: cybersecurity Cybersecurity Cybersecurity is a blanket term that refers to the protection of computer systems and networks from the theft.More broadly speaking, cybersecurity can also represent countermeasures against damage to hardware, software, or electronic data, as well as from the disruption or misdirection of the services they provide.It was not long ago that the term cybersecurity not exist as it was first used in 1989. In today’s vernacular cybersecurity, refers to measures taken to protect a computer or computer Cybersecurity is a blanket term that refers to the protection of computer systems and networks from the theft.More broadly speaking, cybersecurity can also represent countermeasures against damage to hardware, software, or electronic data, as well as from the disruption or misdirection of the services they provide.It was not long ago that the term cybersecurity not exist as it was first used in 1989. In today’s vernacular cybersecurity, refers to measures taken to protect a computer or computer Read this Term outfit Cybernews uncovered a gigantic stash—30 separate datasets containing anywhere from tens of millions up to 3.5 billion credentials each, totaling a staggering 16 billion records. Unlike patched-up leftovers from previous hacks, this is fresh, weaponizable, and ripe for exploitation.

🚨 BREAKING: 16 BILLION PASSWORDS LEAKED: APPLE, GOOGLE, FACEBOOK USERS EXPOSED

What’s being called the largest password leak in history has just been confirmed: 16 billion login credentials, many from major platforms like Apple, Google, Facebook, GitHub, and more, are now… pic.twitter.com/2Sxod46Hha

— Mario Nawfal (@MarioNawfal) June 19, 2025

Who Got Hit—and How Bad?

The dump includes logins for major platforms: Apple, Facebook, Google, GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint for mass exploitation,” empowering criminal enterprises to orchestrate account takeovers, identity theft, ransomware, business email compromise, and highly targeted phishing Phishing Phishing is a form of cyber-attack in which fake websites, emails, and text messages are used to elicit personal data. The most common targets in this assault are passwords, private cryptocurrency keys, and credit card details.Phishers disguise themselves as reputable businesses and other types of entities. In certain instances, reputable government organizations or authorities are impersonated in order to collect this data.Because phishing relies on psychological manipulation rather than techno Phishing is a form of cyber-attack in which fake websites, emails, and text messages are used to elicit personal data. The most common targets in this assault are passwords, private cryptocurrency keys, and credit card details.Phishers disguise themselves as reputable businesses and other types of entities. In certain instances, reputable government organizations or authorities are impersonated in order to collect this data.Because phishing relies on psychological manipulation rather than techno Read this Term campaigns.

Infostealers: The Silent Credential Harvesters

At the heart of this mess are infostealer malwares—Trojan-style programs installed quietly via phishing, malicious downloads, pirated software, etc. These harvest not just passwords, but session cookies, tokens, metadata, browser details and more. Cybercriminal underground markets buy these stolen logs in bulk (as cheap as $2 per batch), turning them into lucrative cybercrime campaigns.

16 billion passwords have been leaked from Apple, Google, Facebook, etc

It is now considered as the largest password leak in history pic.twitter.com/32jiBO6yUN

— Dexerto (@Dexerto) June 19, 2025

What You Should Do Right Now

The Second-Largest Ever Leak?

From the 16 billion number, it’s clear that this breach doesn’t beat out the “26 billion records” breach of 2024. But… the numbers haven’t settled yet, and it appears that these are freshly exploited accounts.

Until a full examination of the datasets takes place, and if it’s even possible, we just don’t know the final numbers.

What is certain is that this is huge and that it impacts users across a wide range of the popular digital services, including Google (Gmail, Android), Apple (i…everything) and good old Facebook.

To check if you're safe from the reported 16 billion password leak, visit Have I Been Pwned? or CyberNews Password Leak Checker to see if your credentials were exposed. If affected, change your passwords immediately to strong, unique ones and enable two-factor authentication…

— Grok (@grok) June 19, 2025

Final Word

If you're tech‑savvy—you can't afford to drag your feet here. Change passwords now, turn on MFA, and don’t sleep on the risk of phishing or credential stuffing. Because in the aftermath of 16 billion leaked passwords, one weak account could set off a domino effect across portfolios, platforms...

For more stories around the edge of tech and finance, visit our Trending pages.