10 Billion Passwords Leaked! Time for Review and Changes

barely 10 billion unique passwords In simple words, they leaked a file named rockyou2024.txt on a popular hacking forum. The passwords were posted by a forum member with the username ObamaCare.

One report says,Larger set of passwords“, making it a questionable record. The account has previously posted passwords from other data breaches, including the employee database at law firm Simmons & Simmons, information from online casino AskGamblers and student applications for Rowan College in Burlington County. The latest record—the broken file—was cross-referenced to data from a leaked password checker from Cybernews, revealing that these passwords came from a mix of old and new data breaches.

This data breach is serious and the exact number of passwords in the file is 9,948,575,739. If you’re the type who reuses passwords across multiple apps and websites to make them easier to remember, chances are your sensitive account passwords are among the passwords in the file.

Its researchers Internet News They said:In essence, the RockYou2024 leak is a collection of real passwords used by people around the world. Exposing so many passwords to threat actors greatly increases the risk of credential stuffing attacks.The recent attacks targeted Santander, Ticketmaster, Advance Auto Parts, and QuoteWizard and were the result of credential stuffing attacks against the victim’s cloud service provider Snowflake. One such attack used stolen credentials from a previous data breach on one service to connect to an unrelated service.

Researchers at Cybernews added:Threat actors could exploit the RockYou2024 password collection to perform brute force attacks and gain unauthorized access to multiple online accounts used by individuals using the passwords included in the dataset.“And that’s exactly what you should be worried about. You may want to create a new password for your most important financial and personal apps and sites, including uppercase and lowercase letters, numbers, and special characters.

[via]