Massive Leak Exposes 149 Million User Credentials, Including 48 Million Gmail Accounts

A significant data breach has resulted in the exposure of 149 million usernames and passwords, with an estimated 48 million belonging to Gmail accounts. This database, confirmed by cybersecurity researcher Jeremiah Fowler, was publicly accessible and unprotected, totaling approximately 96 gigabytes of raw credential data. The leak has raised concerns about the security of personal information across various platforms, including social media, banking, and government services.

ForbesTechRadarWired Magazine

The compromised database includes credentials from several major platforms, with the following breakdown provided by Fowler:

Wired Magazine

• Gmail: 48 million

Forbes

• Facebook: 17 million

Wired Magazine

• Instagram: 6.5 million

Forbes

• Yahoo: 4 million

Wired Magazine

• Netflix: 3.4 million

Wired Magazine

• Outlook: 1.5 million

Wired Magazine

• Binance: 420,000

Wired Magazine

Fowler noted that the database likely comprises data from previous breaches and infostealer logs, rather than a new breach of the services involved. The database was taken down after Fowler reported it to the hosting provider, which had violated its terms of service.

Wired Magazine

The exposure of such a vast amount of sensitive data poses significant risks for users. Boris Cipot, a senior security engineer at Black Duck, emphasized the potential damage, stating that the database contained logins for various critical services, making it a valuable target for cybercriminals. The presence of infostealer malware suggests that the data was collected through malicious means, including keylogging.

Forbes

In response to the breach, a spokesperson for Google stated, "We are aware of reports regarding a dataset containing a wide range of credentials, including some from Gmail. This data represents a compilation of 'infostealer’ logs—credentials harvested from personal devices by third-party malware." The spokesperson reassured users that Google continuously monitors for such external activities and has automated protections in place to secure accounts.

ForbesTechRadarWired Magazine

Experts have raised concerns about the growing prevalence of infostealing malware, which lowers the barrier for cybercriminals to access sensitive information. Allan Liska, a threat intelligence analyst, noted that the ease of renting infrastructure for cybercrime has made it increasingly accessible. The existence of unsecured databases online further exacerbates the risks associated with data breaches.

Wired Magazine

• “This is like a dream wish list for criminals, because you have so many different types of credentials,” — Jeremiah Fowler, Cybersecurity Researcher

Wired Magazine

• “there is no way to know how much damage or data leakage occurred before it was removed,” — Boris Cipot, Senior Security Engineer at Black Duck

Forbes

• “Infostealers create a very low barrier of entry for new criminals,” — Allan Liska, Threat Intelligence Analyst at Recorded Future

Wired Magazine

While the database has been removed, the incident underscores the importance of using unique passwords and implementing robust security measures, such as two-factor authentication. Users are advised to remain vigilant and consider utilizing password managers to safeguard their credentials against potential breaches.

Forbes