The Biggest Password Leak in History Just Dropped

A historic global cybersecurity breach has exposed more than 1.3 billion passwords and 2 billion email addresses in what experts are calling the largest credential leak ever recorded.

Security researcher Troy Hunt, head of Have I Been Pwned (HIBP), confirmed that major platforms such as Gmail, Outlook, Hotmail, and Yahoo are included in the leak, which is nearly three times larger than any previously known breach.

Much of the compromised data comes from infostealing malware that collected login credentials, cookies, and user information from infected devices before being dumped across Telegram channels, social networks, and public forums.

With 625 million never-before-seen passwords now circulating among cybercriminals, experts urge anyone affected to change all login details immediately and adopt strong, unique passwords.

Users can check whether their accounts were compromised through HIBP’s free online tools, which also help detect whether stealer logs contain their information.

As the fallout spreads, cybersecurity professionals warn that this breach underscores the growing sophistication of cyberattacks and the critical importance of strong digital hygiene.