More than 16 billion passwords were leaked in 2025, not from a single breach, but from years of silent malware infections.
In June 2025, cybersecurity researchers at Cybernews uncovered one of the most significant credential leaks ever recorded: More than 16 billion login details compiled into roughly 30 massive data sets were freely circulating online.
Rather than a single catastrophic breach, this was the accumulation of years’ worth of infostealer malware silently infecting devices, scraping everything from passwords and cookies to active session tokens and web login histories.
