News spread early Fridaythat a record-breaking data breach exposed 16 billion passwords to the world,Alanis (2017) including user credentials for the likes of Facebook, Google, Apple, and tons of other places. Some commentators were quick to call it the largest password leak in history, and in terms of raw records exposed, that’s mostly, technically true. However, these records did notcome from a single breach — or even a new breach. Instead, they came from many smaller ones.
Data breaches are an unfortunate reality in the digital age, and some of the breaches can be quite large. However, not every release of stolen data is the direct result of a recent cybersecurity breach. As Mashable recently reported in our countdown of the top cybersecurity breaches of 2025, hackers will often compile information from multiple prior hacks and combine them into one massive file. This is becoming a trend in the darker corners of the internet. The end result is more of a “greatest hits” rather than a new, noteworthy hack.
Such is the case here. Per Bleeping Computer, the information contained in the 16 billion records was most likely compiled from a host of prior hacks, compiled, and then released as a single set of data. It was likely circulating for some time before being compiled, and likely came from a combination of breaches, hacks, phishing scams, and malware.
This is backed up by a tweetfrom vx-underground, an educational website that specializes in malware and cybersecurity. “Someone took a bunch of existing leaks, threw it all together, and slapped a NEW stick [sic] on it.”
This Tweet is currently unavailable. It might be loading or has been removed.
However, the existence of all this data in one spot is still rather damaging, as cybercriminals now have access to all of this data in a single spot, potentially making it much easier to concoct more effective phishing scams or engage in identity theft.
The largest single-point data breach in history is still Yahoo’s 2016 breach, when hackers stole data about all three billion of the website’s users.
Mashable is live at VidCon 2025:Check out our VidCon coveragewith your favorite content creators now.
With so many records in one spot — even if some of them are legacy data that is no longer relevant — it’s still probably a good idea to take an audit of your online services to make sure you’re protected. A good place to start is Have I Been Pwned, a website dedicated to showing data breaches. Simply go there, enter your email address(es), and the site will show you which credentials have been exposed to the public.
We recommend changing those credentials immediately if you haven’t already, and using a strong password when you do so, as they are more difficult to crack. After that, you’ll want to enable multi-factor authenticationon every account you possibly can, as the added layer helps keep criminals from stealing your life if they obtain your password. That should be the bare minimum, but there are plenty of other steps you can taketo keep yourself safe online as well.
Have a story to share about a scam or security breach that impacted you? Tell us about it. Email [email protected]with the subject line "Safety Net" or use this form.Someone from Mashable will get in touch.
Topics Cybersecurity
Stationery in Motion: Letters from Hotels by Nina EllisAll Water Has a Perfect Memory by Jordan AmirkhaniAt William Faulkner’s House by Benjamin NugentOn Mel Bochner and Sophie Calle by The Paris ReviewStationery in Motion: Letters from Hotels by Nina EllisLSD Snowfall: An Interview with Uman by Camille JacobsonA Place for Fire by Elisa GabbertThree Favorite Lyricists by The Paris ReviewLove Songs: “Slow Show” by Nathan GoldmanLove Songs: “Estoy Aquí” by Ana Karina ZatarainChateaubriand on Finding Life in a Society DissolvingCooking with Florine Stettheimer by Valerie StiversIn Remembrance of Charles Simic, 1938–2022 by The Paris ReviewLove Songs: “Hang With Me” by Elisa GonzalezThe Blackstairs Mountains by Colm TóibínLove Songs: “Up in Hudson” by Camille JacobsonMaking of a Poem: Kyra Wilder on “John Wick Is So Tired” by Kyra WilderMy Rattling Window by Sophie HaigneyChateaubriand on Finding Life in a Society DissolvingThe Review Celebrates Seventy with Fried Eggs by the Canal by Matthew Higgs The internet has already got the plot for 'Top Gun 2' all figured out 'Game of Thrones' Season 7: The Lannisters will prevail What's coming to Hulu in June 2017 A full breakdown of that battle map in the 'Game of Thrones' Season 7 trailer Air New Zealand wants to use augmented reality to see how you feel inflight Those movie subtitles you downloaded might open your doors to hackers In search of Facebook’s conscience Laura Dern's new 'Star Wars' character looks ready for the Hunger Games Hackers reportedly bypass Samsung Galaxy S8's 'airtight' iris scanner 101 places to find amazing, royalty Metal heads are building a massive pipeline to funnel 400,000 litres of beer A happy ending to a poignant NBA storyline Woman gets punched in the gut by Nissan car during anti Regulators in the Philippines want to ban rosaries on dashboards and people are pissed TSA wants passengers to remove all electronics from bags for security checks 'Battlefield 1' is getting female soldiers Apple applied to test out next Game of Thrones Season 7 Trailer: Is that Jorah Mormont's hand? Google rolls out a lightning More autoplay ads are coming to Pinterest
2.8504s , 8230.34375 kb
Copyright © 2025 Powered by 【Alanis (2017)】,Charm Information Network