Massive breach exposes 149 million Instagram, Gmail, OnlyFans passwords: How to stay safe?

Key Highlights

• Fowler found that the exposed records included usernames and passwords spanning across almost every major online service imaginable.
• Among the affected services were social media platforms like Facebook, Instagram, TikTok and X (formerly ), dating sites and OnlyFans accounts.
• The leak also exposed a large number of streaming and entertainment accounts, including Netflix, HBO Max, Disney Plus, and Roblox, along with financial services accounts, crypto wallets, banking logins, and even credentials associated with government (. gov) domains.
• Email Accounts: Fowler estimates around 48 million Gmail accounts, 4 million Yahoo accounts, and 1.5 million Outlook accounts were found in the leak.
• Social Media: The database contained logins for 17 million Facebook accounts, 6.5 million Instagram accounts, 780k TikTok accounts, and numerous X credentials.