In a massive data breach that has shocked the cybersecurity world, over 16 billion passwords have been leaked from platforms like Apple, Google, Facebook, and more. This is one of the largest data breaches ever, and experts warn that it isn't just old data being stolen, but rather new sensitive information harvested through modern malware.
With billions of people relying on these major platforms on a daily basis, such leaks could be harmful.
Passwords leaked on major platforms: What possibly caused this?

A record-breaking cybersecurity incident has exposed over 16 billion passwords and login credentials from some of the world’s most widely used platforms, including Apple, Facebook, Google, Instagram, Telegram, GitHub, and others.
The leak reportedly didn’t originate from a single database breach but rather appears to be the result of mass credential harvesting via an infostealer malware. Infostealers, or information stealers, are designed to extract personal details via login credentials, browser cookies, and autofill data.
According to YouTuber SomeOrdinaryGamers, once collected, the information is stored in unsecured cloud servers, like Elasticsearch databases, which are essentially open-source searching platforms that are publicly accessible.
Is the breach a cause for concern?
Yes, absolutely. While some of the data may come from older leaks, security researchers at Cybernews have confirmed that a huge portion of it is very recent and usable, making it a goldmine for hackers.
The passwords leaked from major platforms can be used by hackers for identity theft, targeted phishing attacks, ransomware attacks, and more. Another cause for concern is that many users reuse passwords across sites, making it easier to breach several platforms with a single one.
What should you do if you have your passwords leaked?
Regardless of whether or not you've had your passwords leaked, it's best to be cautious. Here are some actionable steps we advise you to perform right away:
- Change your passwords: Do this for all major platforms. Start with your email, banking, and social media accounts. Never use the same password for more than one account.
- Enable two-factor authentication (2FA): This adds an extra layer of security, making it harder for attackers to access your accounts even if they have your password.
- Use a password manager: These tools can help generate unique and strong passwords.
- Monitor your accounts: Regularly check your accounts for unusual activity and set up alerts for login attempts or changes.
- Consider passkeys: Where available, switch to passkey authentication, which uses biometrics or device-based verification, which is far safer than standard passwords.
Follow Sportskeeda Tech for more news and updates.