ABUJA, Nigeria – A major global data breach has exposed the passwords of an estimated 183 million internet users, raising urgent concerns about online security and digital privacy. Cybersecurity analysts are calling the event one of the largest credential leaks in recent history.
Cybersecurity researcher and founder of the data-breach notification website Have I Been Pwned, Troy Hunt, confirmed on Tuesday that the leaked database contains login details linked to major email providers, including Gmail, Yahoo, and Outlook.
“This is an unprecedented compilation of compromised credentials,” Hunt said. “It highlights how exposed our digital identities have become.”
The breach, first detected by investigators in April 2025, reportedly aggregates passwords stolen from multiple cyberattacks over several years. The database has been circulating on dark-web marketplaces and underground hacker forums, according to security researchers.
Technology analyst Mara Collins warned that the scale of the exposure could allow criminals to impersonate users, commit identity theft, or infiltrate business networks. “People often reuse the same password for several accounts,” she said. “Once attackers gain access to one platform, they can easily breach others.”
Experts advise affected users to update all passwords, enable multi-factor authentication, and monitor account activity for unusual logins.
While Google, Yahoo, and Microsoft have not reported direct server breaches, all have urged customers to review their security settings.
Cybersecurity specialists say the incident underscores the fragility of global data protection systems and the urgent need for stronger online safety measures.
Global Password Leak Sparks Fears of Rising Cybercrime and Privacy Threats
