Fri Jun 20 18:10:00 UTC 2025: **FOR IMMEDIATE RELEASE**

## Record-Breaking 16 Billion Credentials Exposed in Mega Leak

**[City, State] – [Date]** – Security researchers have confirmed the largest password leak in history, with a staggering 16 billion login credentials exposed. The leak, discovered by Cybernews, includes data from social media, VPNs, developer portals, and user accounts across major online platforms, including Apple, Facebook, and Google.

This massive data dump is believed to be the work of multiple “infostealers,” malware designed to harvest sensitive information from infected devices. Cybersecurity experts warn that the leaked credentials pose a significant risk of phishing attacks, account takeovers, and further exploitation.

“This is not just a leak – it’s a blueprint for mass exploitation,” researchers said in their analysis. “These credentials are ground zero for phishing attacks and account takeover.”

Experts are urging users to take immediate action to protect their accounts. Recommendations include:

* **Changing passwords immediately**, especially if the same password is used across multiple sites.
* **Implementing multi-factor authentication (MFA)** wherever available.
* **Using a password manager** to generate and store strong, unique passwords for each account.
* **Switching to Passkeys:** If you are an Apple, Facebook or Google user, now is the time to ditch passwords and replace them with Passkeys.

“It doesn’t matter how long or complex your password is,” said Evan Dornbush, former NSA cybersecurity expert. “When an attacker compromises the database that stores it, they have it.”

This latest breach underscores the importance of proactive cybersecurity measures for both individuals and organizations. Companies are encouraged to adopt zero-trust security models with privileged access controls to limit risk. Individuals should remain vigilant against phishing attempts and take steps to secure their accounts with unique passwords and MFA.

“Organisations need to do their part in protecting users, and people need to remain vigilant and mindful of any attempts to steal login credentials,” said Javvad Malik, lead security awareness advocate at KnowBe4.

Some experts say that urging user education isn’t working and hasn’t been effective in more than a decade. What is working is zero-trust URL authentication approach to the problem.

As Rew Islam, security expert at Dashlane, said, “passkeys aren’t a nice-to-have, they’re essential to protecting users.”

Read More