Massive Database Leak Exposes 184 Million Records

A massive database leak has exposed over 184 million records, potentially putting individuals at high risk of identity theft and cybercrime. The database, which was hosted on an unmanaged client-controlled server, contained login credentials from major global platforms such as Microsoft, Google, Apple, Facebook, PayPal, and Netflix.

The discovery was made by cybersecurity researcher Jeremiah Fowler, who reported the exposed Elasticsearch database to Website Planet. After Fowler's alert, the hosting provider, World Host Group, quickly took down the database to prevent further data exposure.

However, it remains unclear how long the database was publicly accessible or how many unauthorized parties may have accessed the data prior to its removal. Infostealer malware was found in the records, but there is no confirmed breach or misuse of user data.