Over 149 mn Gmail, Instagram, Facebook, Netflix, account passwords exposed in major data leak: Report

Login credentials linked to more than 149 million online accounts were reportedly exposed after a massive database was discovered without any security protection, according to a report.

The findings, attributed to cybersecurity researcher Jeremiah Fowler and published by ExpressVPN, indicate that the leaked data includes accounts associated with popular platforms such as Gmail, Instagram, Facebook, Netflix and several other digital services.

As per the report, the exposed database contained approximately 48 million Gmail accounts, around 4 million Yahoo accounts, nearly 17 million Facebook accounts, about 6.5 million Instagram accounts, 3.4 million Netflix accounts and close to 1.5 million Outlook accounts, among others.

Fowler reportedly stated that the database was publicly accessible and lacked basic security measures such as password protection or encryption. The dataset is said to include over 149.4 million unique usernames and passwords, amounting to nearly 96 GB of raw data.

According to the researcher, a preliminary review of the records revealed files containing email addresses, usernames, passwords and direct links to login or authorization pages, making the information vulnerable to misuse by anyone who accessed the database.

The report further suggests that the compromised data spans users from across the globe and covers a wide range of commonly used online services.

In addition to social media and email accounts, the leaked dataset reportedly included credentials linked to financial services such as banking platforms, crypto wallets, trading accounts and credit card services.

Fowler also flagged the presence of login details associated with government email addresses, warning that even limited access to official accounts could pose serious risks depending on the user’s role and system access.