24 Billion Credentials Exposed in Major Infostealer Data Leak

Israeli Defense reports:

Cybernews researchers discovered an exposed, publicly accessible database containing roughly 24 billion records and more than 8.3TB of sensitive data. The dataset appears to be one of the largest leaks ever uncovered, consisting mainly of stolen login credentials harvested from infected devices. 

The leak, which was discovered on June 12, 2026 and reportedly secured by June 15, 2026, is believed to consist primarily of infostealer malware logs – stolen data harvested from infected devices, including usernames, email addresses, plaintext passwords, and login URLs.

The dataset appears to be a massive aggregation drawn from at least 36 sources. 

Read more at Israeli Defense.