Massive password leak exposes details of nearly 10 billion accounts—secure yourself!
- Replies 39
As technology continues to advance, so do the methods available to us for securing our accounts and sensitive information.
However, this progress is matched by increasingly sophisticated hacking techniques and other unethical practices that can lead to security breaches.
Despite our best efforts, these breaches are stark reminders of the ongoing need for vigilance and adaptation in safeguarding our digital identities and personal data.
A massive password leak, one of the largest in history, has exposed nearly 10 billion passwords.
Researchers at Cybernews discovered the leak on 4 July. They discovered a file named rockyou2024.txt on a popular hacking forum.
This file, posted by a user with the handle ObamaCare, is linked to previous leaks of confidential data, including an employee database from Simmons & Simmons, an international law firm, and student applications from a university in New Jersey.
According to Cybernews, this is the most extensive compilation of leaked passwords, combining data from various old and recent breaches.
It builds upon the RockYou2021 dataset, which surfaced last year with 8.4 billion leaked passwords.
‘Attackers developed the dataset by scouring the internet for data leaks, adding another 1.5 billion passwords from 2021 through to 2024 and increasing the dataset by 15 per cent,’ Cybernews stated.
RockYou2021 stemmed from a 2009 data breach that exposed millions of social media account passwords.
‘Most likely, the latest RockYou iteration contains information collected from over 4,000 databases over more than two decades,’ Cybernews added.
Experts warned that these leaked passwords could be exploited not only on online platforms but also on internet-connected cameras and industrial equipment, potentially leading to data breaches, financial fraud, and identity theft.
‘In its essence, the RockYou2024 leak is a compilation of real-world passwords used by individuals all over the world,’ Cybernews researchers explained.
‘Revealing that many passwords for threat actors substantially heightens the risk of credential stuffing attacks.’
McAfee, a computer security firm, advised concerned users to take precautions:
Update passwords across all accounts with solid and unique combinations. Consider using a password manager for added security.
Additionally, enable Two-Factor Authentication (2FA) wherever possible and regularly monitor bank and credit card statements for unauthorised transactions.
Lastly, exercise caution with phishing attempts through emails, calls, or texts, which cybercriminals use to obtain sensitive information.
These measures are crucial to safeguarding against potential fraud and identity theft from the recent password leak.
In similar news, Medibank is potentially facing civil penalty proceedings from the Australian Information Commissioner following a data breach that impacted 9.7 million Australians.
The breach compromised sensitive personal information, raising concerns about identity theft, extortion, and financial crimes. Further details on this development can be found here.
Have you verified whether your accounts were affected by the hack? Have you taken steps to update your passwords to protect against potential compromise? Share your experiences in the comments below.
However, this progress is matched by increasingly sophisticated hacking techniques and other unethical practices that can lead to security breaches.
Despite our best efforts, these breaches are stark reminders of the ongoing need for vigilance and adaptation in safeguarding our digital identities and personal data.
A massive password leak, one of the largest in history, has exposed nearly 10 billion passwords.
Researchers at Cybernews discovered the leak on 4 July. They discovered a file named rockyou2024.txt on a popular hacking forum.
This file, posted by a user with the handle ObamaCare, is linked to previous leaks of confidential data, including an employee database from Simmons & Simmons, an international law firm, and student applications from a university in New Jersey.
Ten billion passwords were revealed in the leak. Credit: Shutterstock
According to Cybernews, this is the most extensive compilation of leaked passwords, combining data from various old and recent breaches.
It builds upon the RockYou2021 dataset, which surfaced last year with 8.4 billion leaked passwords.
‘Attackers developed the dataset by scouring the internet for data leaks, adding another 1.5 billion passwords from 2021 through to 2024 and increasing the dataset by 15 per cent,’ Cybernews stated.
RockYou2021 stemmed from a 2009 data breach that exposed millions of social media account passwords.
‘Most likely, the latest RockYou iteration contains information collected from over 4,000 databases over more than two decades,’ Cybernews added.
Experts warned that these leaked passwords could be exploited not only on online platforms but also on internet-connected cameras and industrial equipment, potentially leading to data breaches, financial fraud, and identity theft.
‘In its essence, the RockYou2024 leak is a compilation of real-world passwords used by individuals all over the world,’ Cybernews researchers explained.
‘Revealing that many passwords for threat actors substantially heightens the risk of credential stuffing attacks.’
McAfee, a computer security firm, advised concerned users to take precautions:
Update passwords across all accounts with solid and unique combinations. Consider using a password manager for added security.
Additionally, enable Two-Factor Authentication (2FA) wherever possible and regularly monitor bank and credit card statements for unauthorised transactions.
Lastly, exercise caution with phishing attempts through emails, calls, or texts, which cybercriminals use to obtain sensitive information.
These measures are crucial to safeguarding against potential fraud and identity theft from the recent password leak.
In similar news, Medibank is potentially facing civil penalty proceedings from the Australian Information Commissioner following a data breach that impacted 9.7 million Australians.
The breach compromised sensitive personal information, raising concerns about identity theft, extortion, and financial crimes. Further details on this development can be found here.
Last edited:
.png){kind=icon}
