Image missing.
149 Million Usernames and Passwords Exposed by Unsecured Database

Lily Hay Newman

created: Jan. 23, 2026, 11 a.m. | updated: Jan. 26, 2026, 9:55 p.m.

A database containing 149 million account usernames and passwords—including 48 million for Gmail, 17 million for Facebook, and 420,000 for the cryptocurrency platform Binance—has been removed after a researcher reported the exposure to the hosting provider. While attempting to contact the hosting service over the course of about a month, Fowler says the database continued to grow, accumulating additional logins for an array of services. “This is like a dream wish list for criminals, because you have so many different types of credentials,” Fowler told WIRED. There were also, among others, about 780,000 logins for TikTok, 100,000 for OnlyFans, and 3.4 million for Netflix. There is a seemingly endless flow of mistakenly unsecured and publicly accessible databases online that expose sensitive information for anyone to access.

1 week, 3 days ago: WIRED