24B Stolen Passwords Found in Open Database

Researchers at Cybernews found a publicly exposed Elasticsearch database holding over 24 billion stolen credential records, including usernames, plaintext passwords, and login URLs. The trove aggregates years of infostealer malware logs, breach dumps, and criminal server exports, enabling credential stuffing and targeted account takeover at industrial scale.