Researchers at CyberNews are calling it “the largest password compilation,” as nearly 10 billion unique plaintext passwords have been exposed. The data was uploaded to a file titled “RockYou2024,” and these passwords are used by people worldwide.
The CyberNews team warned that this massive leak increases the risk of credential stuffing attacks, which can be detrimental to both users and businesses. Cybercriminals can exploit the leaked information to gain unauthorized access to unrelated services.
Researchers emphasize that attackers can use the leaked passwords and target any system lacking protection against brute-force attacks. This situation could lead to a cascade of data breaches, financial fraud and identity theft, CyberNews said.
To safeguard your accounts, cyber security experts recommend:
- Resetting all passwords: Immediately reset all passwords associated with the leak. Use strong, unique passwords that are not reused across platforms.
- Enabling multi-factor authentication: Whenever possible, enable multi-factor authentication. This adds an extra layer of security by requiring additional information during login.
- Using a password manager: Consider using password manager software to create and securely store complex passwords on your devices.
In another data breach, AT&T reported on Friday, July 12, that a hacker downloaded and released call and text records of tens of millions of customers between May and October 2022.
The breach did not include the contents of calls and messages, and information such as names, Social Security numbers and birthdates was not compromised. AT&T will notify current and former customers if their information was affected.
