'The credential data leak is dangerous simply because of its enormous size': Experts warn "colossal" breach exposes 24 billion records including personal info
- Cybernews found exposed Elasticsearch database with 24 billion plaintext credentials from 36 sources
- Archive (~8TB) compiled infostealer logs, Telegram leaks, and prior breach data; regularly updated
- Owner unknown; mix of English/Russian sources, including 260M records tied to “Darkside” channels
A colossal database containing 24 billion records was found sitting on the internet, available to anyone who knew where to look, including usernames, passwords, and login URLs, all stored in plaintext.
The Elasticsearch database was discovered earlier this month by security researchers from Cybernews, who believe it is a compilation of different logs generated by various infostealers.
“The credential data leak is dangerous simply because of its enormous size,” Cybernews said. “Since the data leaked online, billions of affected accounts are at serious risk of takeovers, especially if they are not protected with multi-factor authentication.”
Identity unknown
The archive was locked down soon after being discovered, barring the Cybernews team...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
