That’s the thing, the article says it’s all new:

The 16 billion strong leak, housed in a number ion supermassive datasets, includes billions of login credentials from social media, VPNs, developer portals and user accounts for all the major vendors. Remarkably, I am told that none of these datasets have been reported as leaked previously, this is all new data. Well, almost none: the 184 million password database I mentioned at the start of the article is the only exception.

but the autistics on Mastodon aren’t going wild about this so I feel safe assuming it’s Forbes clickbait