Anonymous Leaks 9.94 Billion Passwords in 'rockyou2024'
Hacktivist group Anonymous has published a massive database of 9.94 billion unique passwords on a cybercrime forum, dubbed 'rockyou2024'. This staggering leak, revealed in July 2024, includes 1.5 billion passwords not seen before, raising significant concerns for online users' security.
The 'rockyou2024' file is an expansion of the 2021 'rockyou2021' compilation, containing passwords from over 4000 databases spanning more than two decades. This new dataset is a stark reminder of the ongoing threat of credential stuffing attacks, as seen in the 2023 incident involving DNA testing firm 23andMe, which affected nearly 7 million users.
Cybernews previously reported in January 2024 the exposure of a 12TB database holding 26 billion records from past breaches. The 'rockyou2024' leak, containing 9.94 billion plaintext passwords, is another alarming addition to this growing list of compromised credentials.
With nearly 10 billion unique passwords now exposed, online users face a heightened risk of brute-force attacks. It is crucial for individuals to use strong, unique passwords and enable two-factor authentication wherever possible. Security experts urge users to remain vigilant and change passwords immediately if they suspect any compromise.
