Richard Kolko
•12/29/2025

A staggering 16 billion login credentials have been stolen this year, highlighting a massive security breach. With a population of about 350 million in the U.S., this equates to approximately 45 compromised credentials per person.
Infostealers carried out this breach, allowing scammers to access critical information. This can lead to account takeovers, identity theft, and targeted phishing attacks. Major platforms like Google, Facebook, and Apple, as well as some government sites, have been targeted.
Natasha Legros shared her experience of having her email compromised.
"Even with Google, with all the security measures that they have, I've had emails saying that, Oh, 'was this you?' that logged in, and it's actually kind of scary, because a lot of my personal things are tied into my email," said Legros. "So now, with this authentication that they're offering, I think it's a great idea, even if it's like using our face or our fingerprint, knowing that our information is secure is our number one priority."
To check if your credentials have been compromised, visit https://haveibeenpwned.com. This resource is legitimate and can help you stay informed.
Security experts recommend changing your passwords regularly, ideally around New Year's, and using multi-factor authentication. This added layer of security sends a code to your phone or email when you log in.
Legros emphasized the importance of additional security measures.
"I have to use the two-step authentication," said Legros.
Other essential security tips include using strong passwords, a password manager, keeping software updated, being cautious of phishing, and encrypting sensitive data.
Taking steps to protect your online information is crucial.