A massive password leak - reportedly the largest in history - has put over 16 billion credentials at risk! The breach includes data from major platforms like Apple, Google, Telegram and GitHub. While not a direct hack, the information was mostly gathered through info-stealers - malware that collects passwords from infected devices.
Cybernews reports that 30 new datasets have surfaced online, including:
💥 3.5B records tied to users in Brazil;
💥 450M records connected to Russia;
💥 60M Telegram credentials.
This isn't just another breach. Security researchers describe it as a manual for mass attacks. With billions of credentials exposed, bad actors may exploit them for account takeovers, identity theft and phishing scams.
Crypto users are on high alert. While there's no confirmation that seed phrases or exchange logins were leaked, the risk is real - especially for those who store sensitive data in cloud services.
Tether CEO Paolo Ardoino weighed in on X (formerly Twitter):
The cloud has failed us. Again.
16 billion passwords just leaked.
It’s time to ditch the cloud.
That’s why we’ve been building PearPass — coming soon.
A fully local, open-source password manager. No cloud. No servers. No leaks. Ever.
Just you — and your keys, stored securely on your devices.
Whether PearPass becomes a viable alternative or not, the message is clear: centralized cloud storage isn't a safe place for your keys.
If you're active in Web3, here are your next steps:
- Update passwords for all important accounts (Google, Apple, Telegram, etc.)
- Enable 2FA (two-factor authentication) everywhere
- Never store seed phrases digitally - write them down and store them securely
- Check for exposure (using services like Have I Been Pwned)
*Pro tip: If you're using password managers, opt for those that offer end-to-end encryption and local storage options. Trustless = safer.