Urgent Security Alert: 184 Million Passwords Exposed – including Gmail, Google, Apple, Microsoft, Facebook, and PayPal.

May 31, 2025 – A significant data breach has recently come to light, involving the exposure of over 184 million login credentials from major online platforms including Gmail, Google, Apple, Microsoft, Facebook, and PayPal. Cybersecurity researcher Jeremiah Fowler discovered an unprotected and unencrypted database online in May 2025, which is believed to have been compiled using sophisticated infostealer malware designed to harvest usernames and passwords directly from infected devices.

This major security incident underscores the ever-present threats in our digital world and highlights the critical importance of robust cybersecurity practices.  TWDA  urge you to take immediate action to protect your personal and business accounts from potential compromise.

Immediate Actions to Protect Your Accounts

The exposure of such a vast number of credentials means that swift action is essential. We strongly advise you to prioritise the following steps:

1. Change Your Passwords Immediately: Focus on your most critical accounts first – email, banking, social media, and business platforms. Ensure each new password is unique (not used on any other site) and complex, incorporating a mix of upper and lower case letters, numbers, and symbols.
   
   
2. Enable Two-Factor Authentication (2FA) Everywhere: 2FA adds a crucial extra layer of security by requiring a second form of verification beyond just your password (e.g., a code sent to your phone or generated by an authenticator app). Enable this on all accounts that offer it.
   
   
3. Utilise a Reputable Password Manager: If you aren’t already, now is the time to start using a password manager. These tools can generate and securely store strong, unique passwords for all your accounts, meaning you only need to remember one master password.
   
   
4. Review Account Activity Vigilantly: Carefully check your recent login history and account activity on your key accounts for any unauthorised access or unusual transactions. Report any suspicious activity to the respective service provider immediately.
   
   
5. Exercise Extreme Caution with Emails: Be on high alert for phishing emails that may try to trick you into revealing your new login details or clicking on malicious links. Verify the sender’s authenticity before interacting with any unexpected emails, especially those asking for personal information or urging immediate action.
   
   
6. Secure All Your Devices: Ensure that all your computers, smartphones, and tablets are protected with up-to-date antivirus and anti-malware software. Regularly install operating system and application security patches as soon as they become available.

Advanced Security Measures for Enhanced Protection

Beyond these immediate steps, consider implementing the following for even stronger long-term security:

• Adopt Passkeys Where Possible: Passkeys represent a newer, more secure alternative to traditional passwords. They are unique to each service and often use biometric authentication (like your fingerprint or face ID) or a physical security key. This technology is significantly less susceptible to phishing and data breaches, as the actual “password” is not stored on company servers in a way that can be easily stolen. Recent industry reports, including insights highlighted by publications like The Sun, emphasize the enhanced security passkeys offer.
  
  
• Regularly Audit Third-Party Application Access: Review the third-party applications and services that have permission to access your main accounts (e.g., apps connected to your Google or Microsoft account). Revoke access for any applications you no longer use, don’t recognize, or no longer trust. This is a general best practice recommended by cybersecurity experts to limit potential attack vectors.
  
  
• Educate Your Team (For Business Clients): Ensure all members of your team are aware of this data breach and current phishing tactics. Reinforce the importance of strong password hygiene, 2FA, and cautious online behaviour. Regular cybersecurity awareness training is crucial.

TWDA Is Here to Help

At TWDA, your security is our priority. We understand that navigating cybersecurity challenges can be daunting. If you require assistance in implementing any of these security measures, have concerns about the safety of your accounts, or need tailored advice for your business, please do not hesitate to reach out to us.

Visit our website at twda.co.uk for further information and support resources.

Staying vigilant and proactive is the most effective defence against cyber threats. Let’s work together to ensure your valuable digital assets and personal information remain secure.