16 billion leaked records found in exposed databases, report warns

A massive new data exposure has just been uncovered. According to CyberNews, at least 30 databases were found sitting out in the open online. They contained anywhere from tens of millions to over 3.5 billion records each.

These unsecured databases hold around 16 billion leaked records. The data includes account credentials linked to major platforms like Google, Apple, Telegram, and more.

What’s especially concerning is that only one of these databases had been previously reported. That particular leak contained 184 million records, which barely cracks the top 20 of what was just discovered.

To put things in perspective, the number of records far exceeds the number of internet users worldwide. As of early 2025, there are roughly 5.56 billion people online. That means the average user has likely had multiple accounts exposed.

Most of the records were pieced together from stealer malware, credential-stuffing operations, and older data breaches that were repackaged. These aren’t from a single hack. They’re compiled sets that often show up in underground markets or forums. They have been formatted with login URLs, usernames, and passwords in plain text.

This kind of data is dangerous. It fuels phishing attacks, ransomware, and business email compromise scams. And because ownership of the data is unclear, it’s hard to know whether some of it was gathered for research or if it’s all in the hands of threat actors.

If you think your accounts might be involved, start by changing your passwords. Use unique logins for every site and turn on two-factor authentication wherever possible. Better yet, switch to passkeys if the platform supports them. It’s one of the easiest ways to protect yourself as these mega-leaks become more common.

The post 16 billion leaked records found in exposed databases, report warns appeared first on Phandroid.