Data Breach: 16 Billion Passwords Leaked by Cybernews

3 Min Read Tags:

  • Over 16 billion passwords from services like Apple, Google, and Facebook have been leaked.
  • This represents the largest data breach recorded in internet history.
  • The leak contains new, previously unused accounts, posing significant cybersecurity risks.
  • Users are urged to adopt passkeys and two-factor authentication for enhanced security.

A Historic Breach: Cybernews Analysts Confirm Data Leak of 16 Billion Passwords

In an unprecedented development within the digital landscape, researchers at Cybernews have verified a colossal data breach involving over 16 billion user credentials. This breach affects major services such as Apple, Google, Facebook, GitHub, and even governmental agencies. According to a Forbes report, this incident is not merely a leak but a roadmap for potential mass exploitation.

The Scope of the Breach

Cybernews researcher Vilius Petkauskas has been investigating this incident since early this year. His findings reveal 30 distinct datasets each containing tens of millions to over 3.5 billion records. Alarmingly, most of these records had not appeared in prior leaks, indicating they are newly compromised accounts. The structure of these records—URL format with login credentials—provides open access to various online platforms.

Implications for Cryptocurrency Security

This breach significantly impacts the cryptocurrency sector which relies heavily on robust cybersecurity measures. As cryptographic assets continue gaining traction, safeguarding digital wallets and exchanges becomes critical. The exposure of sensitive information can lead to unauthorized access to crypto accounts, resulting in substantial financial loss.

Recommendations for Enhanced Security

Experts underscore the urgency for users to change their passwords immediately and implement two-factor authentication (2FA). Transitioning to passkeys—a more secure form of authentication—is also highly recommended by security professionals. Darren Guccione, CEO of Keeper Security, emphasizes adopting zero-trust models ensuring access only after thorough authentication processes.

A Call for Vigilance

Javvad Malik from KnowBe4 highlights that cybersecurity is a shared responsibility between organizations and users. Users must remain vigilant against threats while organizations need to strengthen their defenses against potential breaches.
The repercussions extend beyond individual security; they could influence broader market stability as seen during past incidents like the May 2025 Coinbase data leak resulting in $400 million losses.
In conclusion: this massive breach serves as a stark reminder of our interconnected vulnerability in the digital age—particularly within burgeoning fields like cryptocurrency—and underscores an urgent need for adopting advanced security practices industry-wide.

Colosseum to Host Hackathon for Projects Across Blockchain Ecosystems

Colosseum’s Crypto World’s Fair hackathon will run from September 14 to October 12, 2026, featuring multiple blockchain ecosystems and more than $3.3 million in prizes and investment, according to a…

4 Min Read
Anthropic Reveals Scientists Used Claude in Dangerous Biological Research

Anthropic said it blocked accounts in five Claude-assisted projects involving chikungunya, avian influenza, orthopoxviruses, poisons and toxins whose results could potentially support biological weapons development, but found no evidence of…

7 Min Read
Blockstream Refused to Pay Liquid Hackers Ransom for Remaining 598 BTC

After 3,400 BTC was returned following the September 6 Liquid Network incident, Blockstream said it would not pay a ransom for the remaining about 598.5 BTC, worth roughly $47 million.

3 Min Read
India Targets Tokenizing $627 Billion Worth of Corporate Bonds

India’s Securities and Exchange Board launched the Demat 2.0 pilot linking tokenized corporate bonds to the wholesale digital rupee, with three companies issuing 10.25 billion rupees in bonds by Sept.…

5 Min Read
US Treasury’s Over-$5B Buyback Fails to Halt 10-Year Bond Sell-Off

The U.S. Treasury accepted $5.2 billion in offers during its first expanded long-term bond buyback on September 10, while the 10-year yield subsequently approached 4.98%.

6 Min Read