Travel News 28 October 2025 - 19 January 2026

January 23, 2026, 9:24 AM EST. An unsecured database exposed 149 million usernames and passwords was removed after a researcher alerted the hosting provider. Jeremiah Fowler, a longtime security analyst, found credentials for Gmail (about 48 million), Facebook (17 million), Binance (420,000) and other services, along with government and banking logins. The data was publicly accessible via a browser and appeared to be indexed with unique identifiers, suggesting automatic organization for quick searching. Fowler suspects infostealing malware collected the data and sold subsets to cybercriminals. The owner could not be determined; the host was a Canadian affiliate of a global provider. The episode highlights the ongoing risk of unsecured databases and credential dumps that criminals can exploit. Fowler described the system to WIRED as built to support targeted misuse.