Technology
149 million passwords exposed in massive credential leak
NEWYou can now listen to Fox News articles!
It has been a rough start to the year for password security. A massive database containing 149 million stolen logins and passwords was found publicly exposed online.
The data included credentials tied to an estimated 48 million Gmail accounts, along with millions more from popular services. Cybersecurity researcher Jeremiah Fowler, who discovered the database, confirmed it was not password-protected or encrypted. Anyone who found it could have accessed the data.
Here is what we know so far and what you should do next.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
AI WEARABLE HELPS STROKE SURVIVORS SPEAK AGAIN
A publicly exposed database left millions of usernames and passwords accessible to anyone who found it online. (Wei Leng Tay/Bloomberg via Getty Images)
What was found in the exposed database
The database contained 149,404,754 unique usernames and passwords. It totaled roughly 96 GB of raw credential data. Fowler said the exposed files included email addresses, usernames, passwords and direct login URLs for accounts across many platforms. Some records also showed signs of info-stealing malware, which silently captures credentials from infected devices.
Importantly, this was not a new breach of Google, Meta or other companies. Instead, the database appears to be a compilation of credentials stolen over time from past breaches and malware infections. That distinction matters, but the risk to users remains real.
Which accounts appeared most often
Based on estimates shared by Fowler, the following services had the highest number of credentials in the exposed database.
- 48 million – Gmail
- 17 million – Facebook
- 6.5 million – Instagram
- 4 million – Yahoo Mail
- 3.4 million – Netflix
- 1.5 million – Outlook
- 1.4 million – .edu email accounts
- 900,000 – iCloud Mail
- 780,000 – TikTok
- 420,000 – Binance
- 100,000 – OnlyFans
Email accounts dominated the dataset, which matters because access to email often unlocks other accounts. A compromised inbox can be used to reset passwords, access private documents, read years of messages and impersonate the account holder. That is why Gmail appearing so frequently in this database raises concerns beyond any single service.
SUPER BOWL SCAMS SURGE IN FEBRUARY AND TARGET YOUR DATA
Email accounts appeared most often in the leaked data, which is especially concerning because inbox access can unlock many other accounts. (Felix Zahn/Photothek via Getty Images)
Why the exposed database creates serious security risks
This exposed database was not abandoned or forgotten. The number of records increased while Fowler was investigating it, which suggests the malware feeding it was still active. There was also no ownership information attached to the database. After multiple attempts, Fowler reported it directly to the hosting provider. It took nearly a month before the database was finally taken offline. During that time, anyone with a browser could have searched it. That reality raises the stakes for everyday users.
This was not a traditional hack or company breach
Hackers did not break into Google or Meta systems. Instead, malware infected individual devices and harvested login details as people typed them or stored them in browsers. This type of malware is often spread through fake software updates, malicious email attachments, compromised browser extensions or deceptive ads. Once a device is infected, simply changing passwords does not solve the problem unless the malware is removed.
TIKTOK AFTER THE US SALE: WHAT CHANGED AND HOW TO USE IT SAFELY
Researchers believe infostealing malware collected the credentials, silently harvesting logins from infected devices over time. (Jaap Arriens/NurPhoto via Getty Images)
How to protect your accounts after a massive password leak
This is the most important part. Take these steps even if everything seems fine right now. Credential leaks like this often surface weeks or months later.
1) Stop reusing passwords immediately
Password reuse is one of the biggest risks exposed by this database. If attackers get one working login, they often test it across dozens of sites automatically. Change reused passwords first, starting with email, financial and cloud accounts. Each account should have its own unique password. Consider using a password manager, which securely stores and generates complex passwords, reducing the risk of password reuse.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
2) Switch to passkeys where available
Passkeys replace passwords with device-based authentication tied to biometrics or hardware. That means there is nothing for malware to steal. Gmail and many major platforms already support passkeys, and adoption is growing fast. Turning them on now removes a major attack surface.
3) Enable two-factor authentication on every account
Two-factor authentication (2FA) adds a second checkpoint, even if a password is exposed. Use authenticator apps or hardware keys instead of SMS when possible. This step alone can stop most account takeover attempts tied to stolen credentials.
4) Scan devices for malware with strong antivirus software
Changing passwords will not help if malware is still on your device. Install strong antivirus software and run a full system scan. Remove anything flagged as suspicious before updating passwords or security settings. Keep your operating system and browsers fully updated as well.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
5) Review account activity and login history
Most major services show recent login locations, devices and sessions. Look for unfamiliar activity, especially logins from new countries or devices. Sign out of all sessions if the option is available and reset credentials right away if anything looks off.
6) Use a data removal service to reduce exposure
Stolen credentials often get combined with data scraped from data broker sites. These profiles can include addresses, phone numbers, relatives and work history. Using a data removal service helps reduce the amount of personal information criminals can pair with leaked logins. Less exposed data makes phishing and impersonation attacks harder to pull off.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
7) Close accounts you no longer use
Old accounts are easy targets because people forget to secure them. Close unused services and delete accounts tied to outdated app subscriptions or trials. Fewer accounts mean fewer chances for attackers to get in.
Kurt’s key takeaways
This exposed database is another reminder that credential theft has become an industrial-scale operation. Criminals move fast and often prioritize speed over security. The good news is that simple steps still work. Unique passwords, strong authentication, malware protection and basic cyber hygiene go a long way. Do not panic, but do not ignore this either.
If your email account was compromised today, how many other accounts would fall with it? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Amazon Health AI brings a doctor to your pocket
NEWYou can now listen to Fox News articles!
Most people have had this moment. You feel a strange symptom, open your phone and start searching online. Within minutes, you are deep in medical forums reading worst-case scenarios. By the end, you are either terrified or more confused than when you started.
Health care should feel clearer than that. Yet for many of us, it rarely does. Appointments take weeks. Medical records are hard to understand. You often have to repeat the same health history at every visit. Insurance rules feel like a maze.
According to the American Academy of Physician Associates, many Americans say navigating the healthcare system feels overwhelming and they wish doctors had more time to listen. Now, a new tool from Amazon hopes to change that experience. It is called Amazon Health AI.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
$163K IN FAKE MEDICAL BILL CHARGES, AI UNCOVERS IT FOR YOU
Amazon Health AI lets you ask health questions, review records and connect with care directly through the Amazon app. (Kurt “CyberGuy” Knutsson)
What Amazon Health AI actually does
Amazon Health AI, available at amazon.com/health-ai, acts as a digital health assistant that can answer medical questions and help guide you through your care. The tool lives inside the Amazon app and website.
You start by typing a health question into a chat box. From there, the system can:
- Explain lab results in plain language
- Review symptoms and suggest next steps
- Help schedule care with a provider
- Assist with prescription renewals
- Recommend relevant health products if asked
Health AI connects directly with clinicians from Amazon One Medical when professional care is needed. You can message a provider, start a video visit or schedule an in-person appointment. The goal is to make getting care simpler. Instead of spending time searching for appointments or jumping between different apps, you can move from a question to a provider more quickly. If symptoms suggest a possible emergency, the system may advise you to contact emergency services, such as calling 911.
Amazon is gradually rolling the Health AI tool out to U.S. customers, and availability varies by location.
CyberGuy reached out to Amazon for comment about the new service. Andrew Diamond, Ph.D., M.D., chief medical officer at Amazon One Medical, said the goal is to reduce some of the everyday frustrations people face when navigating healthcare.
“Nearly two-thirds of Americans feel overwhelmed by the healthcare system and wish their doctors had more time to understand their concerns,” Diamond said. “Health AI is designed to handle the logistical and informational work that creates friction in healthcare, so patients and providers can spend more time on what matters most: the human relationship at the heart of healing.”
How Amazon Health AI uses your medical history
Health AI becomes more useful when it understands your medical history.
With permission, the system can access information such as:
- Past diagnoses
- Medications
- Lab results
- Doctor’s notes
This data flows through a secure national network called the Health Information Exchange. Health AI can access records from hundreds of thousands of providers nationwide once permission is granted.
For example, imagine someone with asthma develops a cough during flu season. A generic search might treat that symptom like any other cough. Health AI can look at your history and ask follow-up questions based on your specific risk factors.
Health AI can provide general information about someone else’s health question, but personalized answers are limited to the medical history of the account holder.
That context helps the system provide more relevant guidance. Still, the assistant does not replace doctors. When the situation requires medical judgment, it connects you with a real clinician.
CHATGPT COULD MISS YOUR SERIOUS MEDICAL EMERGENCY, NEW STUDY SUGGESTS
Health AI can help explain lab results, check symptoms and connect you with care through your phone. (Amazon)
How Amazon connects AI with real medical care
The service works closely with Amazon One Medical providers. Prescription renewals can also move through the system, with requests sent to a One Medical provider who reviews the request before approval. You can fill prescriptions through Amazon Pharmacy or another pharmacy you prefer. This approach helps reduce the steps people often face when trying to get care. Instead of spending time searching for appointments or jumping between different apps, you can move from a question to a provider more quickly.
Special access for Prime members
Amazon is also adding a limited introductory benefit. Eligible members of Amazon Prime can receive up to five free message-based consultations with a One Medical provider.
Neil Lindsay, senior vice president of Amazon Health Services, said the goal is to make care easier to access through the tools people already use. “Eligible Prime member accounts get up to five free direct message care consultations with a One Medical provider for any of the 30 common conditions,” Lindsay said.
These visits cover common conditions, including:
- Colds and flu
- Allergies and acid reflux
- Pink eye and UTIs
- Hair loss and skin care
Outside the promotion, message or telehealth visits typically cost about $29. A full One Medical membership provides broader virtual care and costs less for Prime members than for non-members.
How Amazon says it protects health data
Health information raises serious privacy questions. Amazon says Health AI runs inside a HIPAA-compliant environment with strong encryption and strict access controls. According to the company, personal health data is not used to sell ads. Amazon also says protected health information from One Medical and Amazon Pharmacy is not used for advertising or sold to third parties.
The system also includes safety guardrails. If the AI cannot confidently answer a question, it directs you to a human provider. Behind the scenes, the technology runs on Amazon’s AI platform called Amazon Bedrock.
Amazon also emphasized that Health AI was designed alongside medical professionals rather than built purely as a technology product.
“This isn’t a chatbot with a healthcare skin,” said Prakash Bulusu, chief technology officer at Amazon Health Services. “It’s a system designed from the ground up to be personalized, trustworthy and useful.”
Bulusu said he personally tested the system with his own health data, and it surfaced lab work he had forgotten to complete after a physical exam.
CHATGPT HEALTH PROMISES PRIVACY FOR HEALTH CONVERSATIONS
You can ask Health AI about symptoms and receive guidance before deciding whether to seek medical care. (Amazon)
Why Amazon believes AI belongs in healthcare
Millions of people already search Amazon for vitamins, blood pressure monitors and health products. The company believes AI can help guide those searches and connect them with medical advice. Amazon also partnered with major health systems, including the Cleveland Clinic and Rush University System for Health, to create smoother referrals between primary care and specialists. The idea is continuity. You should not feel like you are starting from scratch every time you see a new provider.
What this means for you
Tools like Health AI show how quickly artificial intelligence is moving into everyday health decisions. For patients, the potential benefits are clear. Faster answers. Simpler records. Easier access to doctors.
Yet it also raises big questions about privacy, data control and how much we rely on automated systems for health advice. AI can help people understand their health. But the human doctor still plays the absolute most important role. The challenge will be finding the right balance.
Take my quiz: How safe is your online security?
Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.
Kurt’s key takeaways
Healthcare can be frustrating. Long waits, confusing records and disconnected systems often leave you feeling lost. Amazon believes AI can help guide you through that process. If the technology works as promised, it could help millions of us understand our health faster and reach care sooner. Still, any system that handles sensitive medical information must earn trust over time. That trust will depend on transparency, security and how responsibly companies use personal health data.
Would you feel comfortable letting an AI assistant review your medical history and guide your health decisions? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Crimson Desert dev apologizes for use of AI art
Reviews of Crimson Desert have been mixed, but the bigger issue for the game has been the discovery of what appeared to be AI-generated assets in the final release. Now the developer has acknowledged that AI art was indeed used during the game’s creation, but says that it was intended to be replaced before release. In a statement on X, the company said it was conducting a “comprehensive audit” to identify and replace any AI-generated content.
The company apologized for both its inclusion in the final release and for not being more transparent about its use during development. “We should have clearly disclosed our use of AI,” it said.
The use of generative AI in gaming has become a hot-button issue of the last couple of years as it’s made its way into several high-profile titles. While some large studios have embraced it, many smaller developers have revolted against the trend, proudly proclaiming their games to be “AI free.”
Technology
YouTube job scam text: How to spot it fast
NEWYou can now listen to Fox News articles!
Most of us have received a random text that makes us pause for a second. Maybe it promises a prize. Maybe it claims to be from a delivery company. Lately, another type of message is spreading quickly: the remote job scam.
That is exactly what happened to Peter from New York. He wrote in after receiving a suspicious message about a high-paying YouTube job.
Here is what he sent:
“I received this text today, and I think it’s a scam. How can I tell for sure, and what do I do next?”
Below is the message Peter received. At first glance, it looks like a job opportunity. However, when you break it down line by line, several warning signs appear. Let’s walk through them.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
FAKE GOOGLE SECURITY PAGE CAN TURN YOUR BROWSER INTO A SPYING TOOL
A suspicious text message promises up to $10,000 a month for boosting YouTube video views. Offers like this are a common sign of a job scam. (Kurt “CyberGuy” Knutsson)
Red flag 1: A random job offer from a stranger
The text comes from an unknown international phone number starting with +63, which is the country code for the Philippines. Legitimate companies rarely recruit through random text messages from unknown numbers. Real employers usually contact candidates through job platforms, email or professional networks like LinkedIn. When a job appears out of nowhere and promises high pay, it should immediately raise suspicion.
Red flag 2: The pay is wildly unrealistic
The message claims:
- $200 to $600 per day
- $10,000 or more per month
Those numbers are a major warning sign. Entry-level remote work, such as “boosting video views” or “YouTube optimization,” does not pay anywhere near that range. Scammers often use unusually high pay to trigger excitement and urgency. When money sounds too good to be true, it usually is.
Red flag 3: No experience required but huge income
The text says “no experience required, free paid training provided.” Scammers often combine high income with zero qualifications. That combination is designed to attract as many people as possible.
Real digital marketing jobs usually require:
- SEO or marketing experience
- Analytics knowledge
- Platform expertise
A company offering $10K per month with no requirements is not realistic.
BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN
Scammers often claim no experience is required and that training is provided. The goal is to lure you in quickly before you start asking questions. (Kurt “CyberGuy” Knutsson)
Red flag 4: The job description is vague
The text claims the job is to “increase video exposure and view count.”
That description is extremely vague. It does not explain:
- What tools you would use
- What company you would work for
- How the work is measured
Scam job offers often stay vague so they can adapt the story later.
Red flag 5: Pressure to respond immediately
The message says: “5 urgent openings available, first come first served.” This is a classic scam tactic. Urgency pushes people to respond quickly before they have time to research the offer. Real companies rarely hire qualified candidates on a first-come basis through text messages.
Red flag 6: The strange reply instructions
The message tells recipients to reply “OK” and then send a numeric code. This step is often used to move the conversation to another messaging platform, such as Telegram or WhatsApp, where scammers continue the scheme. Once the conversation moves there, victims may be asked to:
- Complete fake tasks
- Send cryptocurrency
- Pay deposits for “training”
These scams are often called task scams, where victims complete simple online tasks and may even receive small payments at first before scammers demand larger deposits for payouts that never come. They have exploded worldwide over the past few years.
Red flag 7: No company information
The message never names a real company. It mentions a “manager” named Goldie but provides:
- No company website
- No corporate email
- No office address
Legitimate employers want applicants to know who they are. Scammers avoid details that can be verified.
How these YouTube job scams usually work
Many of these scams follow the same pattern. First, scammers promise easy money for simple tasks lsuch as liking videos or boosting views. At the beginning, they may even send a small payment to build trust. Then things change. Victims are asked to deposit money to unlock larger payouts or complete “premium tasks.” Once payments are sent, the scammers disappear. The Federal Trade Commission says Americans lost hundreds of millions of dollars to job scams in recent years, and text message recruitment scams are rising fast.
Google warns about growing job scams and how to verify recruiters
We reached out to Google, and a spokesperson provided the following statement to CyberGuy:
“Google is aware of these job scams happening across the industry and believes they’re growing around the world. We strongly encourage any candidate, or individual receiving them, to exercise caution and report it to the platform you received it on as a phishing attempt and/or spam. Our recruiting team focuses on contacting candidates in official capacities and are very clear about who we are, why we’re reaching out, and do so from legitimate emails or profiles on job sites. Jobseekers should verify anyone contacting them by email addresses, looking up the person online, such as on LinkedIn, and if something does seem suspicious, flag it to the outlet where it was received. Folks can also vet and report these scams to Google at support.google.com. Our Google careers page reflects all of our current job postings, so candidates should check offers against those. Generally speaking, Google also continues to offer a range of tools and insights that help people automatically spot and avoid scams like these whether they receive them via email, search results, text messages, etc.”
FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM
Messages that push you to reply immediately or move the conversation to apps like Telegram or WhatsApp are a major red flag. (Kurt “CyberGuy” Knutsson)
Ways to stay safe from job text scams
If you receive a message like Peter’s, here are some smart steps to take.
1) Never respond to unknown job texts
Replying confirms your number is active. That can lead to more scam messages.
2) Do not click links or download attachments
Scam texts sometimes include links that lead to phishing pages designed to steal login credentials or financial information. Install strong antivirus software on your devices, which can help detect malicious links, block dangerous websites and warn you before you open something risky. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.
3) Reduce how easily scammers can find your information
Scammers often harvest phone numbers and personal details from data broker sites and public profiles. Using a data removal service to remove your information from these sites can make it harder for criminals to target you with job scams and other fraud. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
4) Research the company independently
Search for the company name online. Look for an official website, verified social media or job listings.
5) Avoid jobs that ask for money
Legitimate employers never require deposits for training, equipment or task access.
6) Block and report the number
You can report scam texts directly from your phone.
On iPhone:
Open the message, tap the phone number at the top of the screen, scroll down and select Block Contact. You can also tap Report Spam under the message. If the option appears, then click Delete and Report Spam, which sends the report to Apple and deletes the message.
On Samsung Galaxy phones:
Steps may vary slightly depending on your Samsung model and software version.
Open the Messages app and select the conversation. Tap the three-dot menu in the upper right corner, then tap Block and report spam, then confirm by tapping Yes. This blocks the number and helps Samsung identify and filter future scam messages.
7) Report it to the FTC
In the United States, you can report scams at reportfraud.ftc.gov. Reports help investigators track large scam networks.
So what should Peter do next?
The safest move is simple. Peter should not reply to the message. Instead, he should block the number and report it as spam. If he has already responded, he should stop communicating immediately and avoid clicking any links or sending money. If he shared personal information such as his phone number, email address or financial details, it may also be wise to monitor his accounts closely and consider signing up for an identity theft protection service. The good news is that spotting the red flags early can prevent a much bigger problem later. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.
Kurt’s key takeaways
Scammers constantly adapt their tactics. Today, it might be a fake delivery notice. Tomorrow, it might be a high-paying remote job. The message Peter received hits many of the classic warning signs: unrealistic pay, vague job duties, urgent language and a request to reply quickly. When a stranger promises easy money through a random text message, pause for a moment. That short pause can save you a lot of trouble.
Now I am curious. If a text suddenly promised you $10,000 a month for simple online tasks, would you recognize the warning signs before replying? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
-
Detroit, MI4 days agoDrummer Brian Pastoria, longtime Detroit music advocate, dies at 68
-
Oklahoma1 week agoFamily rallies around Oklahoma father after head-on crash
-
Nebraska1 week agoWildfire forces immediate evacuation order for Farnam residents
-
Georgia7 days agoHow ICE plans for a detention warehouse pushed a Georgia town to fight back | CNN Politics
-
Alaska1 week agoPolice looking for man considered ‘armed and dangerous’
-
Science1 week agoFederal EPA moves to roll back recent limits on ethylene oxide, a carcinogen
-
Movie Reviews4 days ago‘Youth’ Twitter review: Ken Karunaas impresses audiences; Suraj Venjaramoodu adds charm; music wins praise | – The Times of India
-
World1 week agoThousands march worldwide in solidarity with Palestine, Iran on al-Quds Day