Massive ‘Mother of All Breaches’ Exposes 149 Million Passwords
A cybersecurity alert has been issued after researchers uncovered a massive data leak containing 26 billion records, including 149 million passwords from platforms like Instagram, Gmail, and OnlyFans. Dubbed the “Mother of all Breaches” (MOAB), this compilation from thousands of past breaches poses a severe global threat.
Key Takeaways
- Scale: 26 billion records leaked, including 149 million passwords.
- Scope: Data from Instagram, Gmail, OnlyFans, Twitter, LinkedIn, Snapchat, Adobe, Canva, and government bodies.
- Threat: High risk of identity theft, phishing, and account takeover.
- Action: Immediate password changes and enabling 2FA are critical.
What Was Leaked?
The database, discovered by Cybernews researchers, is a vast aggregation of credentials from previous cyber incidents. It includes sensitive usernames, emails, and passwords from major social media, tech companies, and government organizations across the US, Brazil, Germany, Philippines, and Turkey.
“The dataset is extremely dangerous as threat actors could leverage the aggregated data for a wide range of attacks, including identity theft, sophisticated phishing schemes, targeted cyberattacks, and unauthorized access to personal and sensitive accounts,” researchers said.
While the data is not new, its unprecedented volume creates a unique weapon for cybercriminals. The owner of the database remains unknown, with suspicions pointing to a malicious actor or data broker.
How to Protect Yourself Immediately
If you suspect your information is compromised, follow these essential steps:
- Check for Exposure: Use tools like Cybernews’ data leak checker or Have I Been Pwned to verify if your email or phone is in known breaches.
- Change Passwords: Immediately update passwords for all potentially affected accounts. Use strong, unique passwords for each service.
- Enable 2FA: Add two-factor authentication, preferably using an authenticator app instead of SMS.
- Stay Alert for Phishing: Be wary of unsolicited messages asking for personal details or urging clicks on suspicious links.
- Use a Password Manager: Generate and store complex passwords securely.
- Monitor Accounts: Regularly review bank statements, credit reports, and online accounts for unusual activity.
- Consider Protection Services: Identity theft monitoring services can provide additional alerts.
“The MOAB serves as a critical reminder of the importance of digital security. It underscores the need for continuous vigilance and proactive measures to protect personal information in an increasingly interconnected world,” the researchers added.
