Financial and Business News

16 Billion Passwords—Inc. Apple, Facebook & Google—Just Leaked

Friday, 20/06/2025 | 07:29 GMT by Louis Parks
  • 16 billion credentials from Apple, Facebook, Google, and more have been exposed.
  • The data originates from 30 newly discovered datasets, each fresh and weaponized.
  • Change passwords, deploy MFA, use a password manager, be alert for phishing.
passwords
16 billion passwords from hugely popular services are now out in the ether.

A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not billions.

Utip Advertisement
This above is an advertisement by Utip

Apple, Google, Facebook—The Leak That Broke the Scale

Late June 2025 was the jaw-dropping moment: cybersecurity outfit Cybernews uncovered a gigantic stash—30 separate datasets containing anywhere from tens of millions up to 3.5 billion credentials each, totaling a staggering 16 billion records. Unlike patched-up leftovers from previous hacks, this is fresh, weaponizable, and ripe for exploitation.

Who Got Hit—and How Bad?

The dump includes logins for major platforms: Apple, Facebook, Google, GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint for mass exploitation,” empowering criminal enterprises to orchestrate account takeovers, identity theft, ransomware, business email compromise, and highly targeted phishing campaigns.

Infostealers: The Silent Credential Harvesters

At the heart of this mess are infostealer malwares—Trojan-style programs installed quietly via phishing, malicious downloads, pirated software, etc. These harvest not just passwords, but session cookies, tokens, metadata, browser details and more. Cybercriminal underground markets buy these stolen logs in bulk (as cheap as $2 per batch), turning them into lucrative cybercrime campaigns.

What You Should Do Right Now

To see our comprehensive Table click here and be directed to the full version of the article.

The Second-Largest Ever Leak?

From the 16 billion number, it’s clear that this breach doesn’t beat out the “26 billion records” breach of 2024. But… the numbers haven’t settled yet, and it appears that these are freshly exploited accounts.

Until a full examination of the datasets takes place, and if it’s even possible, we just don’t know the final numbers.

What is certain is that this is huge and that it impacts users across a wide range of the popular digital services, including Google (Gmail, Android), Apple (i…everything) and good old Facebook.

Final Word

If you're tech‑savvy—you can't afford to drag your feet here. Change passwords now, turn on MFA, and don’t sleep on the risk of phishing or credential stuffing. Because in the aftermath of 16 billion leaked passwords, one weak account could set off a domino effect across portfolios, platforms...

For more stories around the edge of tech and finance, visit our Trending pages.

A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not billions.

Utip Advertisement
This above is an advertisement by Utip

Apple, Google, Facebook—The Leak That Broke the Scale

Late June 2025 was the jaw-dropping moment: cybersecurity outfit Cybernews uncovered a gigantic stash—30 separate datasets containing anywhere from tens of millions up to 3.5 billion credentials each, totaling a staggering 16 billion records. Unlike patched-up leftovers from previous hacks, this is fresh, weaponizable, and ripe for exploitation.

Who Got Hit—and How Bad?

The dump includes logins for major platforms: Apple, Facebook, Google, GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint for mass exploitation,” empowering criminal enterprises to orchestrate account takeovers, identity theft, ransomware, business email compromise, and highly targeted phishing campaigns.

Infostealers: The Silent Credential Harvesters

At the heart of this mess are infostealer malwares—Trojan-style programs installed quietly via phishing, malicious downloads, pirated software, etc. These harvest not just passwords, but session cookies, tokens, metadata, browser details and more. Cybercriminal underground markets buy these stolen logs in bulk (as cheap as $2 per batch), turning them into lucrative cybercrime campaigns.

What You Should Do Right Now

To see our comprehensive Table click here and be directed to the full version of the article.

The Second-Largest Ever Leak?

From the 16 billion number, it’s clear that this breach doesn’t beat out the “26 billion records” breach of 2024. But… the numbers haven’t settled yet, and it appears that these are freshly exploited accounts.

Until a full examination of the datasets takes place, and if it’s even possible, we just don’t know the final numbers.

What is certain is that this is huge and that it impacts users across a wide range of the popular digital services, including Google (Gmail, Android), Apple (i…everything) and good old Facebook.

Final Word

If you're tech‑savvy—you can't afford to drag your feet here. Change passwords now, turn on MFA, and don’t sleep on the risk of phishing or credential stuffing. Because in the aftermath of 16 billion leaked passwords, one weak account could set off a domino effect across portfolios, platforms...

For more stories around the edge of tech and finance, visit our Trending pages.

About the Author: Louis Parks
Louis Parks
  • 429 Articles
  • 9 Followers
Louis Parks has lived and worked in and around the Middle East for much of his professional career. He writes about the meeting of the tech and finance worlds.

More from the Author

Trending