16 Billion Passwords Leaked from Major Tech Platforms, Including Apple and Google

Researchers uncovered an unprecedented leak of ~16 billion credentials contained in 30 datasets—many reportedly harvested by infostealer families (e.g., AgentTesla, Lumma, Vidar) and left on unsecured Elasticsearch/cloud storage. The data is described as fresh and highly structured (URL + username/email + password), enabling large-scale credential stuffing, targeted phishing, and account takeovers; the report urges immediate password resets, adoption of passkeys/password managers, and universal MFA while noting some entries may be recycled or fabricated.