A massive database containing 183 million email addresses and passwords has been added to the “Have I been pwned” (HIBP) breach-tracking service. The data, which includes confirmed login credentials for Gmail, Outlook, and Yahoo, originated from “infostealer” malware infections over the past years. This leakage provides a direct link for cybercriminals to conduct malicious attacks. While Google clarified that the report does not stem from a direct breach of its defenses, the company recommends that users immediately enable two-factor authentication, use strong, unique passwords, and check the HIBP website to see if their credentials were leaked.