Unspecified Organizations: Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Massive Credential Exposure Highlights Growing Threat of Infostealer Malware

In mid-June, researchers uncovered an alarming dataset containing 8 terabytes of exposed credentials, totaling approximately 24 billion records one of the largest compilations of stolen login data to date. Unlike traditional breaches targeting a single organization, this incident stems largely from infostealer malware, which silently harvests credentials, session cookies, and authentication tokens directly from infected devices.

Security experts warn that this method poses a broader and more persistent threat than conventional breaches. Phil Wylie, Senior Consultant at Suzu Labs, emphasized that attackers with access to active sessions and tokens can bypass password changes, making phishing-resistant multi-factor authentication (MFA), endpoint protection, and continuous monitoring critical defenses. John Strand of Black Hills Information Security added that the security industry often overlooks identity-based threats in favor of high-profile exploits, despite their equal danger.

The exposed data aggregates information from multiple prior incidents, underscoring the long-term risks of credential theft and the need for organizations to assume eventual exposure. The discovery serves as a stark reminder of the evolving threat landscape, where identity has become the new perimeter in cybersecurity.

Source: https://www.securitymagazine.com/articles/102403-security-leaders-discuss-exposure-of-24b-credentials

Golden Safeguard cybersecurity rating report: https://www.rankiteo.com/company/goldensafeguard

"id": "GOL1783931672",
"linkid": "goldensafeguard",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'attack_vector': 'Infostealer Malware',
 'data_breach': {'number_of_records_exposed': '24 billion',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Credentials',
                                              'Session cookies',
                                              'Authentication tokens']},
 'date_detected': '2024-06-15',
 'description': 'In mid-June, researchers uncovered an alarming dataset '
                'containing 8 terabytes of exposed credentials, totaling '
                'approximately 24 billion records—one of the largest '
                'compilations of stolen login data to date. Unlike traditional '
                'breaches targeting a single organization, this incident stems '
                'largely from infostealer malware, which silently harvests '
                'credentials, session cookies, and authentication tokens '
                'directly from infected devices. The exposed data aggregates '
                'information from multiple prior incidents, underscoring the '
                'long-term risks of credential theft.',
 'impact': {'data_compromised': '24 billion records',
            'identity_theft_risk': 'High'},
 'lessons_learned': 'The incident underscores the long-term risks of '
                    'credential theft and the need for organizations to assume '
                    'eventual exposure. Identity has become the new perimeter '
                    'in cybersecurity.',
 'post_incident_analysis': {'root_causes': 'Infostealer malware harvesting '
                                           'credentials, session cookies, and '
                                           'authentication tokens from '
                                           'infected devices'},
 'recommendations': ['Phishing-resistant multi-factor authentication (MFA)',
                     'Endpoint protection',
                     'Continuous monitoring'],
 'references': [{'source': 'Phil Wylie, Senior Consultant at Suzu Labs'},
                {'source': 'John Strand of Black Hills Information Security'}],
 'response': {'enhanced_monitoring': 'Recommended'},
 'title': 'Massive Credential Exposure Highlights Growing Threat of '
          'Infostealer Malware',
 'type': 'Credential Exposure'}