Data Leak Exposes 149M Logins, Including Gmail, Facebook

A security researcher discovered an unsecured, publicly accessible database containing approximately 149,404,754 unique credentials (~96 GB) likely harvested by infostealer/keylogging malware; the dump included logins for major consumer services (Gmail, Facebook, Instagram), cryptocurrency exchanges, dating sites, and multiple .gov domains. The database was unprotected and continued receiving new records while being reported, presenting high risk for credential stuffing, identity theft, financial fraud, and targeted phishing; the report recommends password changes, enabling 2FA, device scanning with reputable antivirus, and heightened phishing vigilance.