Two million user passwords from Google, Yahoo, Facebook, Twitter, LinkedIn and other sites were reportedly stolen and posted online.

Daniel Chechik at Spider Labs posted about the findings, which is actually a follow-up to a June post about the Pony botnet controller. At the time, it was found that about 650,000 website credentials had been stolen from Facebook, Yahoo, Google and others.

The new findings are as follows:

~1,580,000 website login credentials stolen

~3,000 Secure Shell account credentials stolen

The login credentials come mostly from those sites mentioned at the beginning of the article.

Long story short, you might want to think about changing your password.

Image: Facebook Developers