RockYou2024 file releases 10 billion unique passwords

RockYou2024 data breach overview: 

• Who: A threat actor going by the name ObamaCare posted a file called RockYou2024 containing 10 billion unique password combinations on a popular hacking forum earlier this month. 
• Why: Researchers with Cybernews say the file is the largest compilation of passwords ever published and includes passwords from older and newer data breaches. 
• Where: The data breach exposed password combinations used by individuals worldwide. 

A compilation containing nearly 10 billion unique passwords was reportedly released on a popular hacking forum earlier this month. 

Cybernews reports that the file containing the passwords is titled rockyou2024.txt and was posted by a hacking forum user named ObamaCare. 

Researchers with Cybernews reportedly say the file is the largest compilation of passwords ever released and includes passwords originating from both old and new data breaches. 

The password compilations include ones used by individuals from all over the world, according to Cybernews researchers, who warned that the number of passwords “substantially heightens” the risk of credential stuffing attacks going forward. 

The forum user — who registered with the site in late May 2024 — has also previously shared student applications from Rowan College at Burlington County, an employee database from the law firm Simmons & Simmons, and a lead from online casino AskGamblers reports Cybernews. 

RockYou2024 data breach could be used by threat actors to gain unauthorized access to online accounts

Cybernews researchers reportedly said the RockYou2024 leak could be used to conduct “brute-force attacks” that would allow threat actors to gain unauthorized access to various online accounts. 

Cybernews reports that the data breach came three years after the RockYou2021 password compilation data breach exposed 8.4 billion plain text passwords, including tens of millions of passwords connected to social media accounts. 

The RockYou2021 data breach reportedly expanded on a prior one from 2009. The new RockYou2024 data breach added 1.5 billion passwords to the dataset. 

In other recent data breach news, three consumers filed separate class action lawsuits against Evolve Bank in late June over claims the financial institution failed to prevent a data breach on June 26. 

The consumers separately argued that the data breach was preventable. They claim Evolve Bank is guilty of negligence and breaching federal and state law. 

Are you concerned you may be affected by the RockYou2024 data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Twilio data breach affects customer phone numbers
• Intuit class action claims co. failed to prevent TurboTax, Credit Karma data breach
• Consumers file multiple class actions over Evolve Bank data breach
• TeamViewer data breach attributed to Russian hackers