Cybernews recently revealed one of the largest login data breaches in history, exposing 16 billion records across more than 30 databases. These records, collected using advanced information-stealing software (infostealers), represent fresh stolen data rather than recycled leaks. This alarming breach coincides with Kaspersky’s report of a 21% increase in global password theft attacks between 2023 and 2024, driven largely by spyware and data-stealing malware targeting millions of devices worldwide.
Infostealers extract sensitive information including usernames, passwords, and cookies, which cybercriminals log and trade on the Dark Web to facilitate fraud and unauthorized account access. Kaspersky experts highlight the industrial scale of credential theft, where data is collected, enriched, and sold repeatedly in “combo lists.” Some datasets were reportedly exposed via unsecured public channels, worsening the risk.
Experts recommend robust digital hygiene practices to combat these threats: regularly updating unique passwords, enabling two-factor authentication (2FA), promptly contacting support if compromised, using reliable password managers, and remaining vigilant against social engineering attacks.
The vast scale of leaked credentials and rising cybercrime underscore the urgent need for individuals and organizations to adopt proactive security measures to protect sensitive data in today’s evolving digital threat landscape.