One of the largest data breaches in history has exposed over 16 billion passwords and personal records, with the Portuguese population representing the largest share — more than 3.5 billion credentials were found in a single database.
The leak spans 30 different data sets, indicating multiple attacks rather than a single event. Exposed data includes passwords, usernames, cookies, tokens, and other sensitive information linked to accounts from Google, Apple, Facebook, Amazon, Telegram, Netflix, Microsoft, PayPal, and others.
Most of the stolen credentials are recent, with some going back years. The breach is believed to be caused by infostealer malware — malicious software that infects devices to extract sensitive data.
The leaked information also puts at risk banking details, crypto wallets, and possibly even corporate and government systems, opening the door to identity theft and fraud.
The source behind the attack remains unknown, but the data was discovered on a publicly accessible server, raising serious concerns about digital security.