"The largest leak in history" turned out to be an outdated collection of password archives

On June 19, 2025, sources informed reported the exposure of 16 billion records from many popular online services. According to experts, most of the data was published for the first time. Such an occurrence should have prompted all users concerned about their accounts to react to the threat by changing their passwords and usernames. However, as the initial excitement subsided, it became clear, that this leak is merely a long-standing collection of outdated archives.

An analysis of the situation regarding this massive database, dubbed "the mother of all hacks" on the fly, quickly cooled the heated emotions. Throughout this massive information set, no signs of recent breaches were found, indicating that none of the popular online services have faced effective attacks in recent weeks or months.

The discovered array represents a vast compilation formed over many years, created using password-stealing malware. Specifically, by analyzing the log formation style in the database, specialists concluded that the information was collected by info stealers. They infect computers running Windows and Apple operating systems, intercept keystrokes, and methodically gather information about all usernames and passwords entered in the system. Subsequently, the malicious actor uploads the report logs to their computer, compromising all personal information.

The database of 16 billion records appears to have been compiled over years from thousands or even hundreds of thousands of smaller databases created after breaches over the last few years. It could have been compiled by both malicious actors and cybersecurity companies to stay informed. It remains unknown who released the database into the public domain. However, it likely does not pose an immediate threat to citizens, although it serves as a good reminder that privacy and security on the internet are a myth.

Once again, we emphasize that the incident involving the publication of a vast database of credentials does not represent a single hacking event where an enormous database was stolen. However, the collection is indeed impressive: 16 billion accounts present tangible risks for many users. At the very least, it underscores that anyone could become a target simply by the laws of large numbers. There is no need to panic, but one should not be complacent either.

Source: 3dnews.ru