149 million credentials exposed from platforms such as Binance, Instagram, Facebook, Roblox, TikTok, Gmail, among others

At the end of January 2026, a massive data breach was reported that exposed approximately 149 million login credentials for various online services. This breach was exposed in a public database and affected various platforms such as Binance, Instagram, Facebook, Roblox, TikTok, Gmail, among others. The information, which contained data such as usernames and passwords of registered users, was accessible to anyone with access to the URL. 

The incident was attributed to a security breach caused by “infostealer” malware, which collected the data and stored it in a public database. Although the file was quickly removed, the consequences of the incident had already reached a large scale. The companies involved did not initially issue official statements on the matter, although several experts began to alert users to the risk of this breach and the importance of changing passwords, as well as taking other protective measures, such as activating two-step authentication.

The situation remains worrying due to the magnitude of the data compromised. Although the affected platforms have begun to work on additional security measures, such as improving their encryption protocols, no clear details have been published on specific actions to compensate affected users.