24B Records Exposed in Massive Leak of Emails, Passwords, and Login Data

Cybernews researchers discovered a publicly accessible Elasticsearch cluster containing roughly 24 billion records of stolen credentials, primarily infostealer logs and aggregated collections from sources like Telegram channels and breach compilations. The dataset included plaintext usernames, passwords, service URLs, and some security-tracking artifacts; although the cluster was taken offline, the scale raises severe risk due to credential reuse and potential credential stuffing. Users are advised to change reused passwords, enable multi-factor authentication, and use password managers to mitigate account takeover risk.