A popular hacking forum leaked the most extensive password compilation with nearly ten billion unique passwords. Cybernews researchers discovered what appears to be the largest password compilation, with over 9.9 billion unique plaintext passwords. The file with the data was posted on July 4th. Three years ago, Cybernews published a story about the RockYou2021 password compilation, the largest at the time, with 8.4 billion plain text passwords. According to the analysis, attackers developed the dataset by scrubbing the internet for data leaks, adding another 1.5 billion passwords to the set from 2021 to 2024.
The ten-billion-strong RockYou2024 compilation is a potent weapon in the hands of attackers. This massive collection of passwords can target a wide range of services, from online and offline platforms to internet-facing cameras and industrial hardware. Combined with other leaked databases on hacker forums and marketplaces, it can contribute to a cascade of data breaches, financial frauds, and identity thefts.
It's crucial to remember that anyone reusing passwords or their permutations (variations or combinations of the original password) risks having their account compromised due to this leak.
How can you protect yourself?
- Reset your passwords regularly (you never know who and when will steal your password). It is strongly recommended to select strong, unique passwords that are not reused across multiple platforms
- Enable multi-factor authentication (MFA) wherever possible
- Utilize password manager software to generate and store complex passwords securely. Password managers mitigate the risk of password reuse across different accounts
#ALTACyber
------------------------------
Genady Vishnevetsky
Chief Info Security Officer
Stewart Title Guaranty Company
Houston TX
------------------------------