In what cybersecurity experts are calling the largest leak in internet history, 16 billion login credentials—including passwords for major platforms like Apple, Google, and Facebook—have been discovered circulating among cybercriminals on the dark web, according to a new report by Forbes.
The massive breach, uncovered by researchers at Cybernews and shared with cybersecurity analyst Davey Winder, includes credentials from social media accounts, VPN services, developer portals, and countless other digital platforms.
The datasets—each containing tens of millions to more than 3.5 billion records—have been leaking steadily since the start of 2025.
“This is not just a breach. It’s a blueprint for mass exploitation,” said Vilius Petkauskas of Cybernews, adding that the leak represents “fresh, weaponizable intelligence at scale.”
The breach includes login data likely stolen from users through prior data breaches, malware infections, or phishing campaigns and has now been compiled into a centralized and searchable format for cybercriminals.
Forbes analyst Davey Winder warned that the leaked credentials are essentially “ground zero for phishing attacks and account takeovers,” and stressed the need for immediate action by users worldwide.
“This reinforces that cybersecurity is no longer just a technical concern—it is a shared responsibility,” Winder wrote, urging users to change their passwords immediately, enable two-factor authentication, and switch to passkeys wherever possible.
