Login credentials, including usernames, passwords, of over 149 million accounts of internet firms, including Gmail, Instagram, Facebook, and Netflix, have allegedly been leaked, a report published by ExpressVPN said. The report published by cybersecurity researcher Jeremiah Fowler claims that the publicly exposed data includes 48 million accounts on Gmail, 4 million on Yahoo, 17 million on Facebook, 6.5 million on Instagram, 3.4 million on Netflix, 1.5 million on Outlook, etc. Financial services accounts, crypto wallets or trading accounts, banking and credit card logins also appeared in the limited sample of records that the cybersecurity researcher claims to have reviewed. "Exposed government credentials could be potentially used for targeted spear-phishing, impersonation, or as an entry point into government networks. "Because the data includes emails, usernames, passwords, and the exact login URLs, criminals could potentially automate credential-stuffing attacks against exposed accounts including email, financial services, social networks, enterprise systems, and more.

Source: The Telegraph January 24, 2026 15:32 UTC