Password Security—2.86 Billion Credential Theft Crimewave Exposed

KELA’s 2026 cybercrime report says 2.86 billion compromised credentials were exposed in 2025.

Infostealer malware fueled the theft of passwords, session cookies, and other sensitive browser data.

The surge expanded attacks on cloud, messaging, and browser accounts, hitting both consumers and businesses.

Stolen session cookies can help attackers bypass logins and even weaken two-factor authentication protections.