24B Records Exposed in Massive Leak of Emails, Passwords, and Login Data
2026-06-20T08:51:54Z•2f586388480461988e4f19ce1e9c4c3f278f18be965ce810936b61408e143a10
bitlocker-bypasschrome-adwarecisa-warningcredential-stuffingcredentials-leakdata-breachdata-extortioninfostealerlitellmmicrosoft-patch-tuesdaypassword-exposurepeoplesoft-cve-2026-35273ransomwaresupply-chain-riskvpn-cve-2026-50751zero-day
What happened
A wave of high-impact security incidents and disclosures: researchers found an exposed database of ~24 billion credential records, while Have I Been Pwned added 124M passwords and 56M emails from infostealer logs, raising credential-stuffing and account-takeover risks. Multiple active data-theft and extortion incidents were reported (Novo Nordisk claimed 1.3TB stolen; ShinyHunters and Nintendo extortion claims; Infinite Campus/Salesforce exposure), and South Korea fined Coupang $409M after a massive breach. Several actively exploited zero-days and critical flaws were highlighted — Oracle/PeOPl
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- techrepublic_security
- Record identifier
- 2f586388480461988e4f19ce1e9c4c3f278f18be965ce810936b61408e143a10
- Enrichment time
- 2026-06-20T08:51:54Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.