The 26 billion record data leak and how you should protect your data

Published on
January 23, 2024
Read time
35mins

The 26 billion record data leak and how you should protect your data

Published on
January 23, 2024
Read time
5 mins
Category
5 min read

The 26 billion record data leak and how you should protect your data

Published on
23 Jan 24
Last updatedJanuary 23, 2024January 23, 2024

A database containing a massive 26 billion leaked data records has been identified, involving the world’s most well-known companies as well as some U.S. and other government organisations.

Summary of the 26 billion record data leak

This leak, dubbed the "mother of all breaches", is one of the largest to date, encompassing 12 terabytes of data. Here’s what you need to know.

  • The massive data leak discovered contains 26 billion records, involving major platforms like Dropbox, LinkedIn, Twitter, Tencent, Weibo, Adobe, Canva, and Telegram, plus U.S. and other government organisations.
  • The leak size is 12 terabytes -- one of the largest known breaches.
  • The leaked data includes usernames and password combinations.
  • The data is discovered on an open storage instance and is likely compiled by malicious actors or data brokers.

A silver lining in this data breach is that most of the data doesn't seem to be new. According to the researchers, it largely consists of compiled records from numerous past breaches and leaks. Nonetheless, the researchers have expressed serious concerns, stating that this breach poses a significant threat and could potentially lead to a surge in cybercrime.

How to shield your accounts from unauthorised intrusions?

To reduce the risk of falling victim to cybercrimes related to this data leak, follow these 8 best practices and enhance your overall security.

1. Change your passwords

Regularly update your passwords, especially for accounts that might be affected by the leak. Use strong, unique passwords for each account.

2. Update security questions

If you use security questions for account recovery, make sure they are not easily guessable and are unique to each account.

3. Secure your devices

Ensure that your personal devices are protected with passwords or biometric security measures, and keep your operating system and software updated.

4. Enable multi-factor authentication (MFA)

Wherever possible, activate MFA. This adds an extra layer of security to your accounts, as accessing your account requires both your password and a second factor, such as a code sent to your phone.

5. Beware of phishing attempts

Phishing is the most common starting point of cyber attacks. Be cautious of suspicious emails or messages that ask for personal information or direct you to questionable websites.

6. Check for breaches

Utilise services like a dark web monitoring tool to check if your email or other personal details have been part of previous data leaks.

7. Educate your users

This involves regularly training your users on the evolving cyber risks, such as malware, security vulnerabilities and other new types of cybercrimes. Education and training help users stay informed about the latest cybersecurity threats and best practices.

8. Regular backups

Data is the most valuable asset of an organisation. Make sure you perform regular backups of important data to an external drive or cloud service.

To fortify your defences against unpredictable data leaks, prevention is always better than cure! Get in touch with us today and try out our 14-day free trial.

‍

BOOK A DEMO

See Human Risk Intelligence in action

A 30-minute walkthrough of how to cut human risk across your users, tailored to MSPs and IT teams.

Get a Demo

Subscribe to newsletter

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

A database containing a massive 26 billion leaked data records has been identified, involving the world’s most well-known companies as well as some U.S. and other government organisations.

Summary of the 26 billion record data leak

This leak, dubbed the "mother of all breaches", is one of the largest to date, encompassing 12 terabytes of data. Here’s what you need to know.

  • The massive data leak discovered contains 26 billion records, involving major platforms like Dropbox, LinkedIn, Twitter, Tencent, Weibo, Adobe, Canva, and Telegram, plus U.S. and other government organisations.
  • The leak size is 12 terabytes -- one of the largest known breaches.
  • The leaked data includes usernames and password combinations.
  • The data is discovered on an open storage instance and is likely compiled by malicious actors or data brokers.

A silver lining in this data breach is that most of the data doesn't seem to be new. According to the researchers, it largely consists of compiled records from numerous past breaches and leaks. Nonetheless, the researchers have expressed serious concerns, stating that this breach poses a significant threat and could potentially lead to a surge in cybercrime.

How to shield your accounts from unauthorised intrusions?

To reduce the risk of falling victim to cybercrimes related to this data leak, follow these 8 best practices and enhance your overall security.

1. Change your passwords

Regularly update your passwords, especially for accounts that might be affected by the leak. Use strong, unique passwords for each account.

2. Update security questions

If you use security questions for account recovery, make sure they are not easily guessable and are unique to each account.

3. Secure your devices

Ensure that your personal devices are protected with passwords or biometric security measures, and keep your operating system and software updated.

4. Enable multi-factor authentication (MFA)

Wherever possible, activate MFA. This adds an extra layer of security to your accounts, as accessing your account requires both your password and a second factor, such as a code sent to your phone.

5. Beware of phishing attempts

Phishing is the most common starting point of cyber attacks. Be cautious of suspicious emails or messages that ask for personal information or direct you to questionable websites.

6. Check for breaches

Utilise services like a dark web monitoring tool to check if your email or other personal details have been part of previous data leaks.

7. Educate your users

This involves regularly training your users on the evolving cyber risks, such as malware, security vulnerabilities and other new types of cybercrimes. Education and training help users stay informed about the latest cybersecurity threats and best practices.

8. Regular backups

Data is the most valuable asset of an organisation. Make sure you perform regular backups of important data to an external drive or cloud service.

To fortify your defences against unpredictable data leaks, prevention is always better than cure! Get in touch with us today and try out our 14-day free trial.

‍

Subscribe to newsletter

Subscribe to newsletter

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

FAQs

How can businesses check whether employee credentials have been exposed?

Businesses can use credential exposure tools to check employee email addresses or associated domains against known breach datasets. These checks highlight affected accounts and help IT teams investigate potential password reuse or unauthorized access.

What should a business do if employee credentials are found in a data breach?

Investigate the exposed account, reset affected passwords, check for password reuse, verify MFA settings and review recent account activity where appropriate. The response should reflect the sensitivity of the account and whether there is evidence of unauthorized access.

Does dark web monitoring prevent data breaches?

No. Dark web monitoring identifies known exposures so organizations can investigate and take action. It doesn't prevent credentials from being stolen or guarantee that every compromised account will be detected.

Can I book a demo of the usecure platform?

Yes. usecure offers demos for businesses and MSPs exploring its Human Risk Management and Human Risk Intelligence capabilities. A demo covers the platform, the workflows relevant to you and your requirements before you buy.

Related posts

Explore more insights, updates, and resources from usecure.

See effortless human risk intelligence in action

Book a demo to see how usecure reduces human risk for IT teams and MSPs, or start a free trial to explore the platform yourself.