149M Stolen Logins Exposed in Major Malware Data Leak

Crypto News Exploits

149 Million Stolen Logins Exposed in Major Malware Data Leak

Written by Aaron S.,

Editor-In-Chief

Last Updated: January 26, 2026

Key Takeaways

Jeremiah Fowler discovered a massive database with 149 million stolen logins from malware-infected devices;
The leak exposed accounts from major platforms, including Facebook, Instagram, Netflix, and Binance;
Over 420,000 Binance credentials and several .gov email addresses were found.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

149 Million Stolen Logins Exposed in Major Malware Data Leak

BITDEGREE IN YOUR SOCIAL FEED

Cybersecurity expert Jeremiah Fowler has revealed a database containing login details stolen from malware-infected phones and computers.

The exposed information included accounts from online platforms such as Facebook, Instagram, Netflix, and Binance $7.99B .

In a blog post on ExpressVPN, Fowler said the database contained about 149 million usernames and passwords collected from personal devices. Among them, roughly 420,000 credentials were linked to Binance accounts, suggesting many crypto users were affected.

What is a Crypto Bridge? (Explained with Animations)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

The stolen data covered a wide range of online services. Fowler found around 48 million Gmail accounts, 4 million Yahoo accounts, 17 million Facebook accounts, 6.5 million Instagram accounts, 3.4 million Netflix accounts, and 780,000 TikTok accounts, alongside smaller sets tied to other platforms.

Fowler explained:

This is not the first dataset of this kind I have discovered and it only highlights the global threat posed by credential-stealing malware.

He added that the exposed information also included financial accounts, crypto wallets, and online banking logins.

The researcher also noticed a number of government-related email addresses and .gov domains among the leaked data. Such information could allow scammers to impersonate official institutions in phishing attacks.

Fowler warned that this type of breach shows how quickly stolen data can spread online.

Matcha Meta, a decentralized exchange aggregator, reported a security issue on January 25 involving one of its main liquidity partners, SwapNet. How did the incident happen? Read the full story.