Cybersecurity expert Jeremiah Fowler has discovered the largest database of 149 million credentials, including those of cryptocurrency holders.
The database, discovered on an unsecured server, contains usernames, email addresses, passwords, and login URLs for various online services. According to Fowler, the data remained publicly accessible for over a month before the hosting provider blocked access.
The expert found that the majority of the exposed accounts were Gmail accounts—approximately 48 million. Other affected platforms included Facebook (17 million), Instagram (6.5 million), Yahoo (4 million), Netflix (3.4 million), and Outlook (1.5 million). The database includes nearly 420,000 login credentials for Binance, as well as records related to TikTok, iCloud, OnlyFans, and .edu email domains. Fowler also reported the presence of data linked to government email addresses from several countries.
The approximately 96 gigabytes of data is known to contain credentials obtained from malware-infected devices, not as a result of a hack of the company's systems. Several companies, including Google and Binance, have confirmed that the data leak was not the result of a hack, but rather of hacking software designed to steal information.