# 184 Million Credentials Exposed: A Cybercriminal's Dream Working List

### Summary

- An Elastic server was discovered exposing 184.2 million unique login records, including plain‑text passwords and account IDs.
- The compromised data spanned major tech platforms—Facebook, Google, Amazon, Microsoft, and many banking and health services—indicating a large cross‑industry breach.
- .gov email addresses from 29 countries appeared in the dump, underscoring serious national‑security implications.
- The scale and diversity of credentials point to harvesting by infostealer malware, commonly traded on dark‑web marketplaces.
- Users should change passwords immediately, enable two‑factor authentication, employ a password manager, and monitor accounts for suspicious activity.

wired.com

### Sources

1. [Mysterious Database of 184 Million Records Exposes Vast ... - WIRED](https://www.wired.com/story/mysterious-database-logins-governments-social-media/)
2. [Your iCloud account could be at risk from a 184M password leak - appleinsider.com](https://appleinsider.com/articles/25/05/22/your-icloud-password-could-be-newly-exposed-from-a-giant-password-leak)
3. [Security Nightmare: Researcher Finds Trove of 184M Exposed ... - pcmag.com](https://www.pcmag.com/news/security-nightmare-researcher-finds-trove-of-184m-exposed-logins-for-google)