16 billion passwords leak online in massive data dump with data from Google, Facebook, Apple, and more

It may not be from a new data breach, but a package containing 16 billion login credentials has started circulating online

Over the weekend, reports of a record-breaking data breach began circulating online, with over 16 billion passwords exposed. While analysts have confirmed that this data leak is not a new data breach, it underscores the importance of keeping your login credentials secure. This data bump contains login info for Apple, Facebook, Google, GitHub, Telegram, and other platforms. It even includes data for several government platforms.

While initial reports on this alleged “data breach” may be fearmongering, it has caused a lot of people to check if their online credentials are secure. Troy Hunt, the operator of “Have I Been Pwned“, a website that allows users to check if their email address is in a data breach, had over 1 million visitors in half a day. Over 24 hours, the site had 2.46 million visitors.

Bleeping Computer has confirmed that the “16 billion credentials leak” is just a compilation of prior leaks. This data was previously leaked by infostealers and was exposed through older data breaches. Even so, this new data dump has made the leaked information more widely available, placing it in the hands of more potential attackers.

One million visitors to Have I Been Pwned in half a day. The “16B” breached records headlines are driving a lot of traffic, especially given we haven’t actually loaded any data! pic.twitter.com/gMMQIdQrqe

— Troy Hunt (@troyhunt) June 20, 2025

Since the release of this new data dump, I have heard of several people who have had their accounts attacked. Thankfully, two-factor authentication and other security mechanisms have prevented damage to these users. However, this only serves to highlight the need for strong account protections.

If you want to ensure your accounts remain secure, use two-factor authentication whenever you can. Furthermore, use tools like Have I Been Pwned to check if your credentials are in any existing data breaches. This will allow you to change your passwords if necessary before any potential attack happens. Other basic security measures, like using unique passwords for every website, are also essential.

You can join the discussion on 16 billion passwords leaking online on the OC3D Forums.