In what experts are calling the most extensive data breach in digital history, nearly 16 billion user records have been compromised globally, according to a new investigative report by Cybernews.
In what experts are calling the most extensive data breach in digital history, nearly 16 billion user records have been compromised globally, according to a new investigative report by Cybernews.
The unprecedented breach, which unfolded in the first half of the year, saw 30 major databases targeted by cybercriminals. These databases, some containing over 3.5 billion pieces of user data each, included sensitive information tied to leading tech platforms such as Apple, Facebook, Google, GitHub, Telegram, and even government services.
Cybersecurity researchers attribute the breach to the growing prevalence of info stealers—malicious software designed to quietly harvest login credentials, personal data, and session tokens from infected devices.
Cybernews has dubbed the stolen information "weaponizable intelligence at scale," suggesting that the data could be used to compromise millions of online accounts worldwide, with the potential for widespread identity theft, financial fraud, and espionage.
In May, the scope of the breach became clearer when 184 million data points were discovered floating on the internet, pointing to a much larger operation. These datasets were part of the 30 breached databases under analysis.
Interestingly, the leaked datasets were only publicly accessible for a short time—just long enough for cybersecurity researchers to archive and study them. While this may have prevented widespread exploitation, it has not been possible to trace the source or the perpetrator behind the leak.
Most of the compromised data was exposed via unsecured Elasticsearch databases and open object storage instances, highlighting persistent weaknesses in how organisations store and secure sensitive user information.
While authorities and researchers work to contain the aftermath, the incident underscores a troubling truth: the global digital infrastructure remains dangerously vulnerable. Experts are urging companies and governments to strengthen access controls, enforce encryption, and perform regular security audits.
As the dust settles, this breach will likely trigger fresh debates over data privacy, corporate accountability, and the need for stronger international cybersecurity frameworks.
Read next
07:42
Australia & EU
Australia is set to begin negotiations on a new security and defence partnership with the European Union, while also pushing for a long-anticipated trade agreement, Prime Minister Anthony Albanese announced at the G7 summit.
20:36
A recent hack of the messaging app TeleMessage exposed messages from over 60 U.S. government officials, including National Security Adviser Mike Waltz. The platform was taken offline as investigations continue, with key figures and the company remaining silent.
20:26
Cybersecurity Alert
Russian state-sponsored hackers are actively targeting Western organizations supporting Ukraine, prompting a joint cybersecurity warning from the UK, US, and several allies, according to sources.
20:00
startup Wiz
Alphabet, the parent company of Google, has agreed to acquire cybersecurity startup Wiz for at least $32 billion, according to sources cited by the Financial Times.
What is your opinion on this topic?
Leave the first comment