Over 184 million accounts compromised in massive leak affecting Facebook, Instagram and Microsoft users

Data leak

A massive data leak has exposed over 184 million usernames and passwords, according to a new report by cybersecurity researcher Jeremiah Fowler. The leaked database was left completely unprotected without a password or encryption which made it easy for anyone to access sensitive login information.

The exposed records include email addresses, usernames, passwords, and links to the login pages of various services. These credentials are linked to popular platforms like Facebook, Instagram, Microsoft, Snapchat, Roblox, and even some banking, healthcare, and government portals from around the world.

In total, the database contained 47.42 GB of raw data. Fowler said it looked like the information had been collected using a type of malware known as an infostealer. This kind of malware is designed to silently steal login details, autofill information, cookies, and sometimes even screenshots or keystrokes from infected devices.

What’s more alarming is that Fowler was able to verify the data by reaching out to some of the email addresses in the leak. Several people confirmed that their passwords were real and currently in use.

The IP address linked to the database showed two domains, one of which was inactive and the other unregistered. The true owner of the data remains unknown, and it is still unclear whether the information was gathered for research or stolen for malicious purposes. The database was taken offline soon after Fowler notified the hosting provider.

This leak puts millions of people at risk of identity theft, account takeovers, financial fraud, and phishing attacks. Many users still reuse passwords across multiple accounts, which means just one exposed login could unlock several services.

Experts recommend changing passwords regularly, using unique passwords for each account, enabling two-factor authentication, and scanning systems for malware. It's also a good idea to check if your email appears in known breaches using tools like Have I Been Pwned.

This leak is a serious reminder to stay vigilant about cybersecurity and take proactive steps to protect personal data online.