We Are An Open Book On Our Computers. So, Who Else Is Reading That Book?

Welcome to the digital world! If your response to this phrase is, “Oh, I am not new; I’ve been here long enough,” let’s pause for a moment. Because, in reality, we might not know as much as we think about the emerging world of technology. This false sense of understanding can make us complacent in the face of the lurking dangers on the internet.   

Take recent news, for instance. A publicly accessible database containing login details for some of the world’s most popular digital platforms was recently posted online by malicious actors.  

This unencrypted leak contained over 149 million unique login records, totaling 96 gigabytes of data. Gmail users accounted for the largest number of compromised credentials, with 48 million, followed by Facebook (17 million), Instagram (6.5 million), and Netflix (3.4 million).

Here’s a breakdown of the affected email providers and services:  

EMAIL PROVIDERS:

– 48 million – Gmail  

– 4 million – Yahoo Mail  

– 1.5 million – Outlook  

– 900,000 – iCloud  

– 1.4 million – .edu domains  

OTHER PLATFORMS:   

– 17 million – Facebook  

– 6.5 million – Instagram  

– 3.4 million – Netflix  

– 780,000 – TikTok  

– 100,000 – OnlyFans  

– 420,000 – Binance  

Cybersecurity experts believe the stolen data did not result from a direct breach of corporate servers. Instead, it originated from infostealer malware installed on personal devices, which silently collected login information over time. This malware likely reached people’s devices through malicious email attachments, fake browser updates, compromised plugins, and deceptive ads that many individuals click on without a second thought, especially when they are promoting something they need.  

Despite notifying the cloud hosting provider about the exposure, the cybersecurity expert who discovered this breach reported that it took nearly a month and multiple notifications before the database was removed. The hosting provider has declined to disclose any information about the party responsible for maintaining the server.  

While changing passwords can help, it is not effective if the infected system remains compromised. Experts recommend updating all devices, installing antivirus software, reviewing permissions (which we often grant without thinking, especially when in a hurry), and monitoring for unusual activity.  

Experts specifically highlight the importance of antivirus protection against such threats, but they warn that as we become more accustomed to our computers, we tend to neglect installing these programs. This complacency is akin to extending an open invitation to malicious actors and viruses. As evidence, they cite the percentages of adults in the US (66%) and Canada (82%) who have antivirus software; the rest do not. 

*****