3w ago

16 Billion Apple, Facebook, Google And Other Passwords Leaked — Act Now

www.forbes.com

14 comments

There is a lot of hype in this article and precious little in the way of verifiable facts.
Does anyone have any links to something more credible?
- Same - why I don’t have panic email from our csirt?? Oh - maybe their passw0rd was leek
  I’ve checked KrebsOnSecurity, SecurityWeek, BleepingComputer, and DarkReading
- Does Tom's Guide (arc) count?
  But they have some caveats,
  ... due to the size and the fact there's no way to check one dataset to another, it's highly likely there's overlapping information. Meaning the researchers don't know exactly how many people have been compromised.
  All we know is that, according to the Cybernews [(arc)] report, one dataset (with over 455 million records) was named to "indicate its origins in the Russian Federation". Meanwhile, a second containing over 60 million records, was named after the messaging platform Telegram.
  While this is (to date) seemingly one of the biggest troves of stolen login data discovered, the researchers said the datasets they found remained exposed only for a brief amount of time.
  "The only silver lining here is that all of the datasets were exposed only briefly: long enough for researchers to uncover them, but not long enough to find who was controlling vast amounts of data," Cybernews reported.
  That does not sound like a silver lining?
  Well either way, I'm not that familiar with CyberNews as a source, but glancing at their home page there's like 3 or 4 stories about data leaks, so idk if that's just life in 2025 or if they've got a bit of a preoccupation with that subject
- Okay glad it wasn't just me. I thought I missed something buired in all the typos somewhere
- I've got notification through Google that my Google and Facebook (which I've not used for a year) passwords were compromised a week or so ago. I guess it's linked to this.
OMG OMG ACT NOW! WE'RE ALL GOING TO DIE
twice a week...
I'm getting so tired of these clickbait articles always everywhere screaming at you.
I get the point, passwords leaked, AGAIN, they leak every week from somewhere, but can you just tone it down?
Pretty please?
Until I see an email from haveibeenpwned, I call shenanigans.
Can someone check if my password was leaked? It's "Hunter2". Thanks.
- Change it to hunter3 and you're fine again.
- I’ll check, but I need your mothers maiden name and the street you grew up on.
- Sure what's your email?
"It’s why Google is telling billions of users to replace their passwords with much secure passkeys."
Editing failures kind of undermine the credibility of the article. You literally had one job.
Password managers and 2fa works pretty well.
I’ve pretty much stopped caring about hacked / leaked creds. I figure I’m boring and ordinary enough that though I’ll maybe get targeted eventually, there’s not much to gain and so whatever.

14 comments