A Massive Database of Usernames and Passwords Exposed by Unsecured Host
In a disturbing revelation, hackers have stumbled upon 149 million usernames and passwords stored in an unsecured database, leaving many to wonder how this sensitive information was made so readily available. The trove includes login credentials for popular services like Gmail (48 million), Facebook (17 million), and even government systems from multiple countries.
According to Jeremiah Fowler, a security analyst who discovered the leak, the database was likely created using infostealing malware that infiltrates devices and captures sensitive information users type into websites. This malware makes it simple for attackers to automate the collection of login credentials and other valuable data.
The leaked database contains an astonishing array of logins, including:
* 900,000 Apple iCloud accounts
* 1.4 million .edu academic and institutional accounts
* 780,000 TikTok logins
* 100,000 OnlyFans credentials
* 3.4 million Netflix passwords
The data was publicly accessible and searchable using just a web browser, raising concerns about the ease with which hackers could exploit this information.
While the identity of the hosting provider remains unknown, experts caution that databases like these are becoming increasingly common online, exposing sensitive information to anyone who knows how to find it. Allan Liska, a threat intelligence analyst at Recorded Future, notes that infostealing malware has made it easier for new criminals to break into this type of data.
As the stakes of potential breaches continue to grow, security experts like Fowler emphasize the importance of responsible hosting and data protection practices to prevent such leaks from happening in the first place.
In a disturbing revelation, hackers have stumbled upon 149 million usernames and passwords stored in an unsecured database, leaving many to wonder how this sensitive information was made so readily available. The trove includes login credentials for popular services like Gmail (48 million), Facebook (17 million), and even government systems from multiple countries.
According to Jeremiah Fowler, a security analyst who discovered the leak, the database was likely created using infostealing malware that infiltrates devices and captures sensitive information users type into websites. This malware makes it simple for attackers to automate the collection of login credentials and other valuable data.
The leaked database contains an astonishing array of logins, including:
* 900,000 Apple iCloud accounts
* 1.4 million .edu academic and institutional accounts
* 780,000 TikTok logins
* 100,000 OnlyFans credentials
* 3.4 million Netflix passwords
The data was publicly accessible and searchable using just a web browser, raising concerns about the ease with which hackers could exploit this information.
While the identity of the hosting provider remains unknown, experts caution that databases like these are becoming increasingly common online, exposing sensitive information to anyone who knows how to find it. Allan Liska, a threat intelligence analyst at Recorded Future, notes that infostealing malware has made it easier for new criminals to break into this type of data.
As the stakes of potential breaches continue to grow, security experts like Fowler emphasize the importance of responsible hosting and data protection practices to prevent such leaks from happening in the first place.