Yest another data breach

LHW99

https://www.malwarebytes.com/blog/news/2025/05/184-million-logins-for-instagram-roblox-facebook-snapchat-and-more-exposed-online?x-clickref=1101lBmRtjIJ

Worth changing passwords etc just in case!

It seems they don't know where the data came from, but probably "exposed credentials are likely just a fraction of what cybercriminals have already harvested from likely millions of victims worldwide."

Vitor

Or use a password manager to create uncrackable different password for every site and use 2-factor on all banking, health, email services.

Eyeful

Even if you do not get around to using 2FA, at least make your passwords as long and as complex as possible as the website will allow you to use.
 
A reputable Password Manager will do this and store them for you. All you need to do is remember the password that unlocks the PWM.

If you do not trust an online PWM you can
(a) Use an offline PWM like Keepass XC (there are others)
(b) Use the double blind method for your important financial sites.

I know of one bank that lets your password be as long as 40 characters.

LHW99

Yes I use Keepass, and have 2FA for several important sites. However, in the end no password is completely uncrackable, and not everyone does take that degree of care.

Maybe this might make a few more people think about the sharks out there!

knightstyle

BUT how secure is keepass?   Is it a UK company so you have comeback if it is compromised? 

onomatopoeia99

Article suggests changing passwords regularly, showing the "malwarebytes" website to be years behind current infosec best practice.