184 Million Credentials Exposed: A Cybercriminal's Dream Working List
Summary
- An Elastic server was discovered exposing 184.2 million unique login records, including plain‑text passwords and account IDs.
- The compromised data spanned major tech platforms—Facebook, Google, Amazon, Microsoft, and many banking and health services—indicating a large cross‑industry breach.
- .gov email addresses from 29 countries appeared in the dump, underscoring serious national‑security implications.
- The scale and diversity of credentials point to harvesting by infostealer malware, commonly traded on dark‑web marketplaces.
- Users should change passwords immediately, enable two‑factor authentication, employ a password manager, and monitor accounts for suspicious activity.
wired.com