Home / Technology / 24 Billion Stolen Credentials Found in Massive Data Leak
24 Billion Stolen Credentials Found in Massive Data Leak
17 Jun
Summary
- Massive 8TB database with 24 billion credentials found online.
- Data originated from 36 sources, including infostealer logs.
- Database regularly updated, potentially linked to 'Darkside' group.
An immense Elasticsearch database, approximately 8TB in size and containing 24 billion records, was recently discovered exposed online. Security researchers identified the database as a compilation of infostealer logs and data from 36 varied sources, including Telegram channels and previous data breaches. The exposed information consists of usernames, passwords, and login URLs in plaintext, presenting a severe risk of widespread account takeovers for unprotected accounts.
The identity of the database owner is currently unknown. While most associated Telegram sources were in English, some were in Russian. Notably, around 260 million records were linked to Telegram channels referencing the 'Darkside' ransomware group, notorious for the Colonial Pipeline attack. The archive's contents indicate it was regularly updated, with evidence pointing to its active maintenance as of February 2026.
Due to its enormous size and plaintext format, the leaked credential data is considered highly dangerous. Experts warn that billions of affected accounts are vulnerable to compromise, particularly those without multi-factor authentication. The database was secured shortly after its discovery, limiting further in-depth analysis but confirming its significant scale and potential threat.
