A trove of around 16bn passwords and usernames linked to major online platforms – including Apple, Google, Facebook, Microsoft and dozens of government services – has surfaced online, in what researchers are calling one of the largest known compilations of stolen credentials.

The file was left entirely unprotected - no encryption, no password, no safeguards - just a plain text document holding millions of sensitive data entries.