A large number of Mega account login details have been made public on the internet. The files imply that the threat actors who gathered them had access to each account and detailed the contents of those accounts. It has been observed by experts that the Mega service does not use two-factor authentication, which makes it simple for attackers to gain access to an account after obtaining credentials from previous breaches. Every person who accesses an account on Mega is tracked by IP address; since the file was released, some users have reported that they have observed shady logins coming from South America, Russia, and Eastern Europe.