# Massive data breach exposes 184 million passwords

**URL:** <https://community.clark.com/t/massive-data-breach-exposes-184-million-passwords/7695>\
**Category:** Technology\
**Created:** [May 23, 2025, 11:59pm UTC](https://community.clark.com/t/massive-data-breach-exposes-184-million-passwords/7695 "2025-05-23T23:59:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cnon](https://avatars.discourse-cdn.com/v4/letter/c/a698b9/32.png) [@Cnon](https://community.clark.com/u/Cnon)\
**Post date:** [May 23, 2025, 11:59pm UTC](https://community.clark.com/t/massive-data-breach-exposes-184-million-passwords/7695/1 "2025-05-23T23:59:47Z")

</div>

> **[Massive data breach exposes 184 million passwords for Google, Microsoft,...](https://www.zdnet.com/article/massive-data-breach-exposes-184-million-passwords-for-google-microsoft-facebook-and-more/?utm_source=iterable&utm_source=Iterable&utm_medium=email&utm_medium=email&utm_campaign=newsalerts&utm_campaign=campaign_13643112&zdee=%5BContact.email_zdee%5D)**
>
> The file was unencrypted. No password protection. No security. Just a plain text file with millions of sensitive pieces of data.

---

<div class="post-metadata">

**Author:** ![AustinBonds](https://avatars.discourse-cdn.com/v4/letter/a/6bbea6/32.png) [@AustinBonds](https://community.clark.com/u/AustinBonds)\
**Post date:** [May 25, 2025, 4:26am UTC](https://community.clark.com/t/massive-data-breach-exposes-184-million-passwords/7695/2 "2025-05-25T04:26:49Z")

</div>

Holy moly. I changed my Microsoft Outlook password now and am in the process of looking at Microsoft recent activity. Every day there has been multiple unsuccessful attempts to log in to my account. And the attacks come from dozens and dozens of different countries around the world.

---

<div class="post-metadata">

**Author:** ![ochotona](https://sea2.discourse-cdn.com/flex016/user_avatar/community.clark.com/ochotona/32/293_2.png) [@ochotona](https://community.clark.com/u/ochotona)\
**Post date:** [May 27, 2025, 2:51pm UTC](https://community.clark.com/t/massive-data-breach-exposes-184-million-passwords/7695/3 "2025-05-27T14:51:23Z")

</div>

If you go to Microsoft account settings, there are several things you can do:

1. you can make up new email addresses associated with your account. I made one up, and I only use it for logging into the account, it’s the allowed one I CAN login with, and I never use it for email… so no one knows about it… now I never see attempts to login… because the scammers don’t know where to start for me… my old [hotmail.com](http://hotmail.com) address which was exposed years ago no longer works for login

2. ask MSFT to require you to change your password every 72 days… why 72? Who knows? But I do that

3. Multi-factor authentication using an MFA app or hardware key!