16 billion passwords leaked in 'mother of all breaches' — Apple, Google, even government sites hit. To protect yourself do this ASAP!

"No stone was left unturned," the report warns.

How hackers can use the data

This breach isn’t just about stolen email addresses, it’s about what cybercriminals can do with your full login credentials — especially if you tend to use the same passwords across your different accounts.

Once hackers get your email and password combo, they can launch a range of attacks, including:

• Credential stuffing: Hackers try your login across banking, streaming, shopping, or investment sites. If you reuse passwords, they could gain access to your most sensitive accounts.
• Phishing and social engineering: With access to personal details or email accounts, scammers can send convincing fake messages or impersonate you to friends, coworkers, or customer service agents.
• Identity theft: Stolen credentials can be used to open credit cards, apply for loans, or take over government benefit accounts in your name.
• Access to 2FA and backups: If hackers get into your email, they may intercept security codes, password reset links, or even gain access to your cloud storage and documents.

Google, Facebook, Netflix, Apple, LinkedIn, Dropbox and PayPal are among the slew of accounts with data compromised, meaning nearly every kind of online identity is at risk.

Even worse: many of the stolen credentials are in plain text, making them incredibly easy to exploit with automated tools.

How to protect yourself from cybercrimes

With billions of passwords out in the wild, here’s how to stay one step ahead of hackers:

• Change your passwords — especially for email, banking and shopping accounts. If you reuse passwords, it’s time to break the habit.
• Turn on 2FA — that’s two-factor authentication. It adds a second layer of defense, and it’s free on most platforms.
• Use a password manager — stop relying on your memory (or sticky notes). Let an encrypted vault generate strong passwords for you. This makes it easier to change your password frequently, too.
• Watch your inbox — phishing scams tend to spike after big breaches. Don’t click suspicious links, even if they look legit.

Most importantly, monitor any financial accounts you have closely. Think PayPal, bank accounts and credit cards etc. Check your statements and even pull a credit report from Equifax or Transunion.

“This is the mother of all data breaches,” Ed Peters, CEO of Data Discovery Sciences, explained in an interview with NBC 5 DFW. “We tend to think of a lone hacker going and stealing your data. That’s not the case.”

With cybercriminals sitting on a dragon’s hoard of credentials, experts say the risks of account takeovers, phishing and fraud are higher than ever.

Don’t wait for a “suspicious activity” email — lock it down now.

Sources

1. NBC 5 DFW: 16 billion passwords leaked in massive data breach, by Meredith Yeomans (Jun 20, 2025)