Sixteen billion passwords to social media accounts and other services were leaked in one of the largest data breaches ever.
The breach exposed login credentials and passwords for Apple, Facebook, Google, and government services.
Google has advised its users to update their passwords, and the FBI is cautioning against clicking on links in SMS messages.
Researchers at Cybernews discovered 30 datasets containing millions to billions of records, with only one previously reported.
The leaked data provides cybercriminals with access for account takeover, identity theft, and targeted phishing.
The breach is described as a blueprint for mass exploitation with fresh, weaponizable intelligence.
It is considered one of the largest data breaches in history, originating from various sources like credential stuffing lists and malware.
The exposed datasets were only visible briefly, leaving unknown the identity of those controlling the data.
Data privacy experts emphasize the seriousness of the breach and the potential access attackers could gain to multiple services.
Individuals impacted by the breach are advised to check for malware and ensure device security through updates, unique passwords, and multi-factor authentication.
Monitoring for exposure on the dark web and regular checks of financial statements are recommended to prevent potential fraud.