Account Credential Leak Exposes 200 Million Records

The latest account credential leak reveals just how fragile online privacy remains. In May 2025, cybersecurity researcher Jeremiah Fowler discovered an unsecured database containing over 184 million user credentials—including live passwords, usernames, and emails for platforms like Google, Microsoft, and Facebook.

Shockingly, the file was a plain text dump. No password. No encryption. Just sitting online, wide open for anyone to find.

This Wasn’t a Hack—It Was Negligence

Unlike most breaches, this wasn’t pulled off with advanced malware or insider access. Fowler uncovered the data during a routine scan of public assets. Anyone with the link could open the file in a browser—no credentials needed.

As a result, over 184 million unique records were completely exposed. These included login credentials tied to hospitals, banks, and even government platforms. Therefore, the impact stretches well beyond social media logins.

To make matters worse, Fowler contacted several individuals listed in the file. Many confirmed the credentials were still active. These weren’t old passwords—they were live access keys.

Where Did the Data Come From?

Fowler suspects the data was collected using an infostealer—a tool cybercriminals use to silently extract login credentials from compromised devices. Once stolen, the data is sold on the dark web or used in direct attacks.

Eventually, this data ended up in a publicly accessible file. After Fowler’s report, the hosting provider took it down. However, the owner of the file remains unidentified. It’s still unclear whether the exposure was accidental or malicious.

Regardless of intent, the damage was done. Anyone who found the link could hijack accounts without any technical skill.

Why This Matters More Than You Think

Every new account credential leak highlights the failure of centralized systems. From the Oracle Cloud breach to 23andMe’s data fallout, it’s the same pattern: too much trust placed in systems that fail to protect you.

Moreover, many users still assume their data is safely stored. In reality, credentials are shared, stored, and reused across platforms without meaningful safeguards.

Therefore, breaches like this are not outliers—they’re warnings.

Privacy Shouldn’t Depend on Luck

With each leak, one truth becomes clearer: users need direct control over their data. That’s what VALT provides.

Rather than hoping companies fix their systems, VALT gives you:

• A private, encrypted timeline of the data you’ve shared

• Tools to delete personal info from broker networks permanently

• The option to earn from anonymized data you choose to share

In addition, VALT’s decentralized VPN (dVPN) ensures no single authority can log your online activity. Combined with quantum-resistant encryption, this system puts your data—and your decisions—back in your hands.

Still trusting centralized servers? It’s time to switch.

Download the VALT app and control your credentials before someone else does.