A huge credential dump sourced from infostealer malware shakes tech giants including Apple, Google and Facebook, forcing urgent password resets for millions, if not billions.

Apple, Google, Facebook—The Leak That Broke the Scale

Late June 2025 was the jaw-dropping moment: cybersecurity outfit Cybernews uncovered a gigantic stash—30 separate datasets containing anywhere from tens of millions up to 3.5 billion credentials each, totaling a staggering 16 billion records. Unlike patched-up leftovers from previous hacks, this is fresh, weaponizable, and ripe for exploitation.

Who Got Hit—and How Bad?

The dump includes logins for major platforms: Apple, Facebook, Google, GitHub, Telegram—and even government portals. Cybernews warns it’s a “blueprint for mass exploitation,” empowering criminal enterprises to orchestrate account takeovers, identity theft, ransomware, business email compromise, and highly targeted phishing campaigns.

Infostealers: The Silent Credential Harvesters

At the heart of this mess are infostealer malwares—Trojan-style programs installed quietly via phishing, malicious downloads, pirated software, etc. These harvest not just passwords, but session cookies, tokens, metadata, browser details and more. Cybercriminal underground markets buy these stolen logs in bulk (as cheap as $2 per batch), turning them into lucrative cybercrime campaigns.

What You Should Do Right Now

The Second-Largest Ever Leak?

From the 16 billion number, it’s clear that this breach doesn’t beat out the “26 billion records” breach of 2024. But… the numbers haven’t settled yet, and it appears that these are freshly exploited accounts.

Until a full examination of the datasets takes place, and if it’s even possible, we just don’t know the final numbers.

What is certain is that this is huge and that it impacts users across a wide range of the popular digital services, including Google (Gmail, Android), Apple (i…everything) and good old Facebook.

Final Word

If you’re tech‑savvy—you can’t afford to drag your feet here. Change passwords now, turn on MFA, and don’t sleep on the risk of phishing or credential stuffing. Because in the aftermath of 16 billion leaked passwords, one weak account could set off a domino effect across portfolios, platforms…

For more stories around the edge of tech and finance, visit our Trending pages.

This article was written by Louis Parks at www.financemagnates.com.TrendingRead More

You might also be interested in reading New Hollywood Streaming App Giving Away $5000 in Celebration of ‘God Bless Bitcoin’ Documentary.