While it's not as large in scale as the latest data breach that leaked over 16 billion passwords, another incident has exposed passwords and other sensitive information across some of the most popular services on the internet. Cybersecurity researcher Jeremiah Fowler revealed his discovery of a massive online database containing more than 184 million unique account credentials, in a report published late last month. Usernames, passwords, emails, and URLs for a host of applications and websites, including Google, Microsoft, Apple, Facebook, Instagram, and Snapchat, among others, were stored in a file. The database also contained credentials for bank and financial accounts, health platforms, and government portals. Also: 16 billion passwords leaked from Apple, Google, more: Here are the facts and how to protect yourself The problem? The file was unencrypted. No password protection. No security. Just a plain text file with millions of sensitive pieces of data. Based on his analysis, Fowler determined the data was captured by some kind of infostealer malware. A popular tool used by cybercriminals, an infostealer is designed to grab usernames, passwords, and other sensitive data from breached sites and servers. Once the criminals get their hands on the data, they can use it to launch their own attacks or peddle the information on the dark web. After finding the database, Fowler contacted the hosting provider, which removed it from public access. Since the provider would not disclo...
184 million passwords leaked across Facebook, Google, more: What to know about this data breach
ZDNet
·Lance Whitney
·Published Jun 23, 2025
·Updated
Affected Software
6 affected components
Google Google
Microsoft Microsoft
Apple Apple
Facebook Facebook
Instagram Instagram
Snapchat Snapchat
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses a data breach that has exposed 184 million passwords across various popular platforms.
2
Which companies are involved in this data breach?
The affected companies include Facebook, Google, Microsoft, Apple, Instagram, and Snapchat.
3
What type of information was leaked in the breach?
The breach includes passwords and other sensitive information of users.
4
How significant is this data breach compared to others?
While not as large as previous breaches that leaked over 16 billion passwords, this incident still represents a substantial risk to user security.
5
What should users do in response to this breach?
Users should change their passwords and enable two-factor authentication on their accounts immediately.