24 Billion Stolen Credentials Exposed in Massive Data Leak

Cybernews discovered an exposed Elasticsearch cluster on June 12 containing 24 billion records (8.3 TB) mostly made up of infostealer logs — plaintext usernames, emails, and passwords — aggregated from 36 sources including Telegram channels and large “collections.” The dataset included recent items (one as recent as Feb 2026), CVE references, and signs the owner was actively updating the trove; although the cluster was taken offline after discovery, the sheer scale and content pose a major risk of account takeover for affected users, particularly those without MFA or who reuse passwords.