16B passwords from Apple, Facebook, Google and more leaked

According to the original source (linked in the article), the credentials are plaintext from infostealing malware, not centralized breaches.

This is the natural consequence of what happens when you fail to enforce security liability on device manufacturers. Two+ decades of insecure IOT devices network connected that enable this type of collection, and other bad bad things.