Back Feeds.Feedburner

Massive database with 24 billion credentials found exposed online

Feeds.Feedburner •SC Staff • June 17, 2026

A colossal database containing 24 billion records, including usernames, passwords, and login URLs in plaintext, was discovered exposed on the internet. Security researchers from Cybernews found the Elasticsearch database, which is believed to be a compilation of various infostealer logs, according to a recent report by Tech Radar.

The exposed database, weighing approximately 8 terabytes, was compiled from 36 different sources, including Telegram channels, data breach collections, and data exported from live servers. While the exact number of unique entries is unknown, the sheer volume of data poses a significant risk of account takeovers for billions of users, especially those without multi-factor authentication.

The owner of the database remains unidentified, with sources indicating a mix of English and Russian origins. Notably, around 260 million records are linked to Telegram channels associated with the defunct ransomware group "Darkside." The database appears to be regularly updated, suggesting active monitoring of the cybersecurity landscape.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Massive Data Leak Exposes 24 Billion Credentials: Urgent Security Risks Identified Cybernews researchers uncovered an exposed Elasticsearch database containing 24 billion records, including usernames, email addresses, and plaintext passwords. The data is primarily sourced from infostealer malware logs and Telegram channels associated with cybercrime. The breach poses a significant risk to billions of accounts, especially those lacking multi-factor authentication. The exposed data includes records from 36 distinct sources, with over 1.7 billion records traced back to Telegram channels. The sheer volume of the leak, totaling over 8 terabytes, marks it as one of the largest credential leaks in history. Cybersecurity experts emphasize the urgent need for users to change passwords and enable multi-factor authentication to mitigate risks. The leak was discovered on June 12, 2026, and has raised alarms across the cybersecurity community. 12 sources 70

Extracted Entities

Massive database with 24 billion credentials found exposed online

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Ransomware Groups (1)