A major cybersecurity concern has emerged after more than 149 million login records were discovered in an unprotected online database. The exposed data included credentials from popular services such as Gmail, Facebook, Instagram, Yahoo Mail, Netflix, Outlook, iCloud, and TikTok. The database, found by cybersecurity researcher Jeremiah Fowler, was 96 gigabytes in size and lacked any password or encryption protection, allowing anyone with internet access to view it.

The leak did not result from a direct hack of Google or Meta servers but from malware infections on users’ devices. The malware, identified as an infostealer type, collected login data over time through fake software updates, malicious email attachments, harmful browser extensions, and deceptive online ads. Despite being reported to the hosting company, the database remained publicly accessible for nearly a month.

Experts warned that compromised email accounts could allow hackers to reset passwords for other services, putting banking, social media, and healthcare accounts at risk. They urged users to update software, use strong unique passwords, enable two-factor authentication, and regularly scan devices for malware.