Huge data leak exposes 149 million credentials without protection

A massive data breach has come to light, involving 149 million credentials left exposed online. The 98GB cache includes unique usernames and passwords from financial services, social media, and dating apps. The discovery highlights ongoing vulnerabilities in digital security.

The enormous cache of data, totaling 98GB, was found without any protective measures, making it easily accessible to potential bad actors. This leak encompasses credentials from various sectors, including financial services where users manage banking and investments, social media platforms used for daily communication, and dating apps that handle personal information.

Details emerged on January 23, 2026, underscoring the scale of the exposure: 149 million unique usernames and passwords. No encryption or safeguards were in place, amplifying the risk of identity theft, account takeovers, and financial losses for affected individuals.

Experts in cybersecurity have long warned about the dangers of unencrypted data dumps, but this incident serves as a stark reminder of how quickly such information can surface online. Users are advised to monitor their accounts and update passwords, though the full impact remains unclear without further details on the breach's origin.

The event raises questions about data handling practices across these industries, potentially prompting regulatory scrutiny.

Awọn iroyin ti o ni ibatan

Dramatic illustration depicting the Coupang data breach, with data spilling from a cracked digital vault and investigators on scene.
Àwòrán tí AI ṣe

Coupang data breach spanned June to November

Ti AI ṣe iroyin Àwòrán tí AI ṣe

A massive data breach at e-commerce giant Coupang exposed personal information of 33.7 million customers from June 24 to November 8. Officials revealed the attacker exploited the company's electronic signature key, prompting a thorough government investigation. The incident has heightened public concerns over South Korea's data protection capabilities.

A significant data breach has compromised the credit card information of more than 5.6 million individuals. The incident involves 700Credit, where data was stolen via a third-party API integration. Details emerged in a recent report on cybersecurity threats.

Ti AI ṣe iroyin

A 2022 data breach at password manager LastPass has resulted in prolonged cryptocurrency thefts, according to blockchain intelligence firm TRM Labs. The incident involved stolen user vaults that facilitated around $35 million in losses extending into 2025.

Following the 2022 LastPass data breach, blockchain firm TRM Labs has tied over $35 million in stolen cryptocurrency to Russian cybercriminals, detailing sophisticated laundering via mixers and exchanges persisting into late 2025.

Ti AI ṣe iroyin

A massive data breach at South Korea's leading e-commerce firm Coupang has exposed personal information of 33.7 million customers. Police are tracking a Chinese former employee suspect using an IP address, while the government considers fines up to 1 trillion won. The breach, starting in June, went undetected for five months.

Police conducted a second day of raids at e-commerce giant Coupang's headquarters over a massive data breach affecting 33.7 million customers. The suspect is a former Chinese developer who worked on the company's authentication system. Prime Minister Kim Min-seok described the incident as 'beyond serious' and vowed strict action.

Ti AI ṣe iroyin

A pirate activist group has scraped and released metadata from Spotify's music library, with plans to distribute 86 million audio files. The breach, reported on December 21, 2025, involves 256 million rows of track data set for peer-to-peer sharing. Spotify is investigating the unauthorized access.

 

 

 

Ojú-ìwé yìí nlo kuki

A nlo kuki fun itupalẹ lati mu ilọsiwaju wa. Ka ìlànà àṣírí wa fun alaye siwaju sii.
Kọ