A massive data leak has exposed usernames passwords and personal information of nearly 149 million users across major online platforms including Gmail Facebook Instagram Netflix TikTok Binance and OnlyFans, cybersecurity experts have warned.

The unsecured database discovered by cybersecurity researcher Jeremiah Fowler contained around 96 gigabytes of sensitive data and was freely accessible online. According to findings shared with WIRED the leaked information included approximately 48 million Gmail accounts 17 million Facebook accounts, 6.5 million Instagram accounts 3.4 million Netflix accounts 780,000 TikTok accounts, 420,000 Binance accounts and more than 100,000 OnlyFans accounts.Millions of Yahoo Outlook,iCloud and academic email accounts were also exposed.

Fowler said the data appeared to have been collected using infostealing malware  malicious software that infects devices and silently extracts saved passwords browser data and login credentials.This is like a dream wish list for criminals he warned.

Experts say the leak significantly raises the risk of account takeovers, financial fraud, phishing scams and impersonation particularly for users who reuse passwords across multiple services.

Unlike traditional breaches targeting a single company, this incident involved data aggregated from multiple infected devices, making it harder to trace responsibility. The database was taken offline after being reported to the Canadian hosting provider but experts stress the incident highlights growing risks posed by misconfigured and unsecured online databases.

Users are advised to change passwords, enable two-factor authentication and avoid reusing credentials across platforms.