Jeremiah Fowler, a cybersecurity researcher, found a database linked to Vibetech that anyone with a web browser could access. It held 13.7 million credential records gathered from earlier breaches and leaks, with no password protection or encryption.
The records included names, phone numbers, email addresses, plaintext passwords and bank account details belonging to people in multiple countries.
Vibetech is an India-based AI software development and IT services company. It had collected datasets from previous breaches, then made them publicly available through the database without requiring authentication.
The largest collection was marked “AT&T Data Leak” and contained 7,910,431 records, nearly 58% of the 13.7 million total.
Other datasets included a “Gambling Private Combo” with 2,241,617 records, a “casio.ru Data Breach” containing 1,714,752 records, and an “Amazon Private Combo” with 1,210,905 records.
A Walmart combo held 420,368 records. The database also included a Spanish WhatsApp database with 98,325 records, an “FBI Employee Directory” with 4,084 records and an “Interpol Data Leak” with 929 records.
An “Intelligence Insights” panel said email credentials made up 72.1% of the records. It identified RedLine, an infostealer malware, as the main source and estimated 5,193,979 infections.
The records carried an import timestamp of 15 April 2026.
Fowler published his report on 12 October 2026. He sent Vibetech a responsible disclosure notice and alerted the hosting provider, after which access to the database was restricted.
The available information does not establish why Vibetech was collecting the credentials, whether the company knew the database was exposed, whether anyone accessed the material before it was restricted, or what response Vibetech gave.
Comments (0)