Please wait we are preparing awesome things to preview...

16 Billion Credentials Breached: Crypto Wallet Security Risk

21.06.2025 11:48

A massive data breach affecting Apple, Google, Facebook, and other tech giants has exposed 16 billion credentials, including logins, session cookies, and crucially, two-factor authentication bypass tokens for various cryptocurrency platforms. This unprecedented leak isn't a rehash of old data; it's a fresh trove of newly compromised information, fueling a dramatic increase in cryptocurrency wallet hacks.

The stolen credentials, sourced from 30 compromised databases and stored on insecure cloud servers, are meticulously categorized, making them highly valuable to malicious actors. This allows hackers to efficiently target specific services, including popular cryptocurrency wallets like MetaMask, Coinbase, Binance, and Phantom. The ease with which hackers can bypass two-factor authentication significantly increases the risk for cryptocurrency users.

Consequently, a surge in coordinated credential stuffing and phishing attacks is underway. Users employing single-factor authentication or reusing passwords across multiple platforms are particularly vulnerable. The attackers are exploiting the leaked data to access not just email and social media accounts but also directly targeting cryptocurrency wallets, potentially resulting in significant financial losses for victims. This widespread vulnerability highlights the critical need for robust security practices in the digital age.

This alarming data breach follows closely on the heels of a separate major attack on the Iranian cryptocurrency exchange, Nobitex. The pro-Israel hacker group, Gonjeshke Darande, claimed responsibility for this incident, citing allegations of the exchange's involvement in sanctions evasion and terrorism financing. While the connection between these two events isn't explicitly stated, both demonstrate the increasing sophistication and scale of cyberattacks targeting the cryptocurrency industry. The sheer volume of compromised credentials underscores the urgent need for users to review and strengthen their online security measures.