Security researchers uncovered a publicly exposed database containing 149 million usernames and passwords, including Gmail, Facebook and Binance accounts. Likely harvested using infostealing malware, the leak affected email, banking and government services. Although removed, experts warn low-cost cybercrime makes strong passwords and multi-factor authentication essential.