--- title: "184M Apple and Google Accounts Hacked | Firevault" description: "The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials,…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault#webpage", "url": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault", "name": "184M Apple and Google Accounts Hacked", "description": "The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials,…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/184-million-accounts-hacked.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "184M Apple and Google Accounts Hacked, Go Offline", "item": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault" } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "184M Apple and Google Accounts Hacked, Go Offline", "description": "The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials,…", "url": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault", "image": [ { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/184-million-accounts-hacked.jpg", "width": 1200, "height": 1200 }, { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/184-million-accounts-hacked.jpg", "width": 1200, "height": 900 }, { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/184-million-accounts-hacked.jpg", "width": 1200, "height": 675 } ], "thumbnailUrl": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/184-million-accounts-hacked.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Director & Co-Founder", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@type": "NewsMediaOrganization", "name": "Firevault", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 600, "height": 60 } }, "datePublished": "2025-05-27T21:47:28+00:00", "dateModified": "2026-08-28T08:03:22.256672+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/news/184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault" }, "inLanguage": "en-GB", "articleSection": "News", "wordCount": 462, "keywords": "184M, News, data breach, cyber security, offline secure storage, data protection, physical air gap", "articleBody": "The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials, including login data tied to Apple ID and Google accounts two of the most widely used digital ecosystems in the world. Discovered by cybersecurity researcher Jeremiah Fowler, the data included usernames, email addresses, and passwords in pla", "dateline": "United Kingdom", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "h1", ".article-summary", "h2" ] }, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2025 } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) [Knowledge Vault](/learn/knowledge)/ [News](/learn/knowledge?filter=news) News · 27 May 2025 # 184M Apple and Google Accounts Hacked, Go Offline The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials,… ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) Mark Fermor Director & Co-Founder, Firevault 3 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Fnews%2F184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Fnews%2F184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault&text=184M%20Apple%20and%20Google%20Accounts%20Hacked%2C%20Go%20Offline%0A%0AThe%20numbers%20are%20staggering.%20The%20exposure%20is%20global.%20A%20publicly%20accessible%2047GB%20ElasticSearch%20database%20has%20exposed%20over%20184%20million%20unique%20account%20credentials%2C%E2%80%A6)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Fnews%2F184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault)[](mailto:?subject=184M%20Apple%20and%20Google%20Accounts%20Hacked%2C%20Go%20Offline&body=The%20numbers%20are%20staggering.%20The%20exposure%20is%20global.%20A%20publicly%20accessible%2047GB%20ElasticSearch%20database%20has%20exposed%20over%20184%20million%20unique%20account%20credentials%2C%E2%80%A6%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Fnews%2F184-million-apple-google-accounts-hacked-another-wake-up-call-for-going-offline-with-firevault) ![Filing cabinet drawers pulled open with papers spilling onto the floor in a dark archive room, magenta desk lamp casting dramatic light](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/184-million-accounts-hacked.jpg) Filing cabinet drawers pulled open with papers spilling onto the floor in a dark archive room, magenta desk lamp casting dramatic light Why it matters ## What this means for organisations holding critical data The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials,… In this analysis **On this page** The numbers are staggering. The exposure is global. A publicly accessible 47GB ElasticSearch database has exposed over 184 million unique account credentials, including login data tied to Apple ID and Google accounts two of the most widely used digital ecosystems in the world. Discovered by cybersecurity researcher Jeremiah Fowler, the data included usernames, email addresses, and passwords in plain text, no encryption, no protection, no excuse. The repository was hosted by World Host Group and has since been taken offline, but the damage is already done. This isn’t just a leak. It’s a mass exposure event. What was found? The leaked credentials spanned a wide range of services not just Apple and Google: Government email addresses across 29 countries, including the UK Logins for platforms like Facebook, Discord, Instagram, Roblox, and Snapchat References to banking and crypto wallets in file names and keywords A high likelihood the dataset was harvested using infostealer malware deployed via phishing campaigns or malicious apps As Fowler noted, “This isn’t just one platform. It’s digital identity theft on a systemic, industrialised scale.” This isn’t your fault but it is your risk Even if you’ve never reused passwords (which most people do), many third-party services have indirect access to your cloud data through tokens, syncing permissions, or app integrations. Once breached, it’s not just your files it’s your entire digital identity at stake. What to do immediately Change your passwords now especially for Apple ID, Google, and any reused logins Enable hardware- or app-based 2FA (not SMS) Remove third-party app access from cloud services Monitor your accounts for unusual login activity or phishing attempts But even then, you’re still online. And what’s online can always be breached. Firevault: The answer that lives offline This breach is a reminder that cloud convenience comes at a cost. Encryption helps but only physical disconnection can eliminate the attack surface entirely. That’s where Firevault™ comes in. > “If there’s no IP address, there’s nothing to find. Firevault keeps your most valuable digital assets completely offline until you choose to access them,” explains Mark Fermor, co-founder of Firevault. Firevault is the world’s first fully offline digital vault air-gapped, invisible, and identity-locked. No packets. No ports. No exposure. It’s built for: Legal files, contracts, and shareholder data [Intellectual property](/oss-for-intellectual-property), startup IP, and creative works Crypto seed phrases, banking docs, insurance policies Personal documents that simply cannot be replaced In short: what matters most. The wake-up call This is no longer about if your data will be targeted. It’s about how exposed it already is and what you’re doing to take back control. Encryption isn’t enough. Password managers aren’t enough. Visit [firevault.com](/) to take control before the next breach finds you. Protect your data. Disconnect to protect. Firevault. #Cybersecurity #AppleHack #GoogleBreach #Firevault #DataBreach #OfflineSecurity #DigitalSovereignty #DisconnectToProtect About the author ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Controls an auditor can physically verify Firevault gives you physical separation, named custody and evidenced access, so compliance claims about isolation and control are things you can show, not just assert. [Get started](/get-started)[Talk to the team](/demo) **Custody**Named, access-controlled hardware in a Firevault Bunker **Evidence**Access windows and retrieval events are recorded **Separation**Physical isolation that satisfies offline copy requirements **Jurisdiction**Stored where your regulatory position requires Related Reading ## You may also find these useful [ ![Firevault Awarded Cyber Essentials and Cyber Essentials Plus Certification](/__l5e/assets-v1/446b675b-b48b-4b8e-ba01-b97ad3abf97d/firevault-cyber-essentials-plus-certified-2x.jpg) News ### Firevault Awarded Cyber Essentials and Cyber Essentials Plus Certification Firevault has been awarded Cyber Essentials and Cyber Essentials Plus certification, the UK Government-backed scheme run by the NCSC, following an independent technical audit of its systems and controls. 26 Jul 2026 2 min ](/news/firevault-cyber-essentials-plus-certified)[ ![Russian hackers steal UK government logins: why offline vaults change the equation](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/news%2Frussian-hackers-uk-government-logins.jpg) News ### Russian hackers steal UK government logins: why offline vaults change the equation The Telegraph reports that Russian-linked hackers have harvested UK government login credentials and traded them on dark-web forums. The incident is a reminder that credentials, however well protected in the cloud, remain the single point of failure that offline data vaults are designed to remove. 7 Jul 2026 4 min ](/news/russian-hackers-steal-uk-government-logins-offline-vaults)[ ![Great Marlow School partially closed after cyber attack](/news/great-marlow-school-cyber-hero.jpg) News ### Great Marlow School partially closed after cyber attack A malware incident has shut down ICT systems at Great Marlow School in Buckinghamshire, cancelling lessons and silencing parent communications. Here is what it tells us. 14 Jun 2026 4 min ](/news/great-marlow-school-cyber-attack-partial-closure)[ ![School Ransomware: Files Must Live Offline](/__l5e/assets-v1/5dcdf155-e287-48e8-bf9b-82b9837b80d0/school-ransomware-safeguarding-2x.jpg) News ### School Ransomware: Files Must Live Offline St Anne's Catholic School in Southampton was shut for four days after ransomware hit its network. It is not the first school to be targeted. From nurseries to councils, sensitive safeguarding data remains dangerously exposed on connected systems. 27 Mar 2026 7 min ](/news/st-annes-southampton-ransomware-safeguarding-files-physically-offline)[ ![TfL Hack: 10 Million Records Stolen](/__l5e/assets-v1/77ff397a-d530-4aee-88e3-5098513ae34e/tfl-hack-10-million-scattered-spider-2x.jpg) News ### TfL Hack: 10 Million Records Stolen Transport for London has confirmed that around 10 million customer records were stolen during the 2024 Scattered Spider cyber attack, making it one of the largest data breaches in British history. The revelation raises urgent questions about transparency, regulatory accountability and the case for offline secure storage. 11 Mar 2026 5 min ](/news/tfl-hack-10-million-records-stolen-scattered-spider)[ ![Firevault: 2025 Tech Trailblazers Shortlist](/__l5e/assets-v1/c2acabab-9ada-4969-9d69-b18478181083/firevault-shortlisted-trailblazers-v2-1771248067838-2x.jpg) News ### Firevault: 2025 Tech Trailblazers Shortlist We’re proud to announce that Firevault Limited has been shortlisted for the 2025 Tech Trailblazers Awards, recognised in the Firestarter category. For a young… 29 Nov 2025 6 min ](/news/firevault-shortlisted-for-the-2025-tech-trailblazers-firestarter-award) ## Suggested Reading - [What is Offline Secure Storage The foundation of physical disconnection ](/offline-secure-storage/what-is-oss) - [Why Offline Secure Storage The case for physical control ](/why-oss) - [Ransomware Defence Hold gold copies offline ](/oss-for-ransomware-recovery) - [Control Physical path control for IT and OT ](/solutions/control) - [Knowledge Vault All articles, guides and whitepapers ](/learn/knowledge) - [Book a Demo See Firevault in action ](/demo) [Back to Knowledge Vault](/learn/knowledge)