Solid data losing contains registration edition of 184 million internet users

The database with more than 47 GB data was identified in May 2025 by security researcher Jeremiah Fowler. In contrast to typical data injuries, in which the source can be followed frequently, this trove was missing identifiable metadata, whereby the origin and purpose of data acquisition was unknown. The presence of plain language username and passwords suggests that the data may have been compiled by cybercriminals or researchers with info -focus malware.

A sample analysis of 10,000 records showed a wide range of compromised accounts:

Further entries included login information for Amazon, Apple, Nintendo, Snapchat, Spotify, Twitter, WordPress and Yahoo. In particular, the data also contained 220 e -mail addresses with .gov domains from at least 29 countries, including the United States, Australia, Canada, China, India, Israel, New Zealand, Saudi and the United Kingdom and stopped potential national security risks.

“This is probably one of the strangest things I've found for many years,” says Fowler. “As far as the risk factor is concerned here, this is much greater than most things I think, since this is direct access to individual accounts. This is a cybercrime work list of a cybercriminals.”

Fowler reported on the database leak to the World Host Group, the company that was exposed to the leak. However, they were quickly to the reaction and immediately provided the database offline after the report. Although they only reacted to Fowler after contacting the media.

Seb de Lemos, CEO of the World Host Group, later explained that the server was used by a fraudulent user customer tax and abused and the company works with the authorities to improve its reporting systems.