Cybernews security researchers claim they've found the biggest data leak ever: 16 billion login records exposed online. They say this includes logins for major services like Apple, Google, Facebook, GitHub, and Telegram, plus government sites worldwide.

The report states their team found 30 separate exposed datasets since early 2025. ranging from millions to over 3.5 billion records each, totaling 16 billion credentials.

However, experienced security news sites BleepingComputer and ZDNet immediately challenged Cybernews. They argue this isn't a new, single leak. Instead, it appears to be a compilation of old, previously known breaches, data stolen by malware, and reused passwords from past attacks. Essentially, it mixes many unrelated databases together – likely including massive duplicates and outdated info.

Even AP News noted Cybernews admitted the data "absolutely has duplicates," making the true number of affected users unclear.

Despite the debate over the report's scale, one fact remains: if Cybernews researchers found this huge pool of exposed login details online, so could hackers. Security experts universally agree this serves as a critical reminder: everyone should update important passwords now, use strong unique passwords (a password manager helps), turn on two-factor authentication where possible, and regularly check account activity logs for anything suspicious. Don't wait for confirmation – assume some of your old credentials might be floating around.