149 Million Usernames and Passwords Exposed by Unsecured Database

A researcher discovered a publicly searchable database containing 149 million account credentials spanning email, social media, financial, government, and streaming services; the trove—likely assembled by infostealer malware using techniques like keylogging—was taken down after the host was notified, but its scale and organization indicate significant credential theft risk and potential criminal resale.