16 Billion Credentials Leaked: Why Password-Only Auth Is Dead
If you have a password — and you almost certainly do — there is a reasonable chance it is now sitting in a dataset of 16 billion stolen credentials currently circulating on the internet. In mid-2025, researchers at Cybernews uncovered more than 30 exposed datasets containing over 16 billion username-password combinations, harvested