{"id":21560,"date":"2021-06-12T08:35:23","date_gmt":"2021-06-12T12:35:23","guid":{"rendered":"https:\/\/www.thundercloud.net\/infoave\/new\/?p=21560"},"modified":"2021-06-12T08:35:23","modified_gmt":"2021-06-12T12:35:23","slug":"rockyou2021-over-8-billion-passwords-stolen","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/rockyou2021-over-8-billion-passwords-stolen\/","title":{"rendered":"RockYou2021: Over 8 Billion Passwords Stolen"},"content":{"rendered":"

 <\/p>\n

 <\/p>\n

RockYou2021: Over 8 Billion Passwords Stolen<\/span><\/strong><\/p>\n

On Saturdays, we try to feature something different or something important. Today, we’re featuring something important. Over eight billion passwords were stolen in the world’s largest password collection compiled from previous data leaks and breaches.\u00a0<\/span><\/p>\n

Today’s article comes via Cybernews and we want to bring it to your attention because there’s a good chance that one or more of your passwords are in this massive compilation of user passwords. The Cybernews article tells you how to check to see if your password(s) are among the 8+ billion passwords contained in the RockYou2021 compilation.<\/span><\/p>\n

For accounts dealing with money or highly sensitive personal information, we recommend that you change your password at least every six months. And always make sure you use a strong password containing upper and lowercase letters, numbers, and symbols. A password manager like LastPass, RoboForm, Bitwarden<\/a>, or one of the many other free or commercial password managers available, makes creating strong passwords and saving them easy to do.<\/span><\/p>\n

And now from Cybernews<\/a>… all about the world’s largest collection of stolen passwords ever publish…<\/span><\/p>\n

\n

RockYou2021: largest password compilation of all time leaked online with 8.4 billion entries<\/span><\/strong><\/span><\/p>\n

“… What seems to be the largest password collection of all time has been leaked on a popular hacker forum. A forum user posted a massive 100GB TXT file that contains 8.4 billion entries of passwords, which have presumably been combined from previous data leaks and breaches.\u00a0<\/span><\/em><\/p>\n

“According to the post author, all passwords included in the leak are 6-20 characters long, with non-ASCII characters and white spaces removed. The same user also claims that the compilation contains 82 billion passwords. However, after running our own tests, the actual number turned out to be nearly ten times lower \u2013 at 8,459,060,239 unique entries:<\/span><\/em><\/p>\n

\"rockyou2021.txt\"<\/span><\/em><\/figure>\n

“The compilation itself has been dubbed \u2018RockYou2021\u2019 by the forum user, presumably in reference to the infamous RockYou data breach<\/a>\u00a0that occurred in 2009 and rockyou2021.txt filename containing all passwords, when threat actors hacked their way into the social app website\u2019s servers and got their hands on more than 32 million user passwords stored in plain text.\u00a0<\/span><\/em><\/p>\n

\n
\n
\n
\n

“An example of leaked passwords included in the RockYou2021 compilation:<\/span><\/em><\/p>\n

\n
\"rockyou2021.txt<\/span><\/em><\/figure>\n<\/div>\n

“With a collection that exceeds its 12-year-old namesake by more than 262 times, this leak is comparable to the Compilation of Many Breaches (COMB)<\/a>, the largest data breach compilation ever. Its 3.2 billion leaked passwords, along with passwords from multiple other leaked databases, are included in the RockYou2021 compilation that has been amassed by the person behind this collection over several years.<\/span><\/em><\/p>\n

“Considering the fact that only about 4.7 billion people are online, numbers-wise the RockYou2021 compilation potentially includes the passwords of the entire global online population almost two times over. For that reason, users are recommended to immediately check if their passwords were included in the leak.\u00a0<\/span><\/em><\/p>\n

How to check if your password was leaked?<\/strong><\/span><\/em><\/h2>\n

“… We have now uploaded nearly 7.9 billion out of 8.4 billion entries in the RockYou2021 password list to our leak databases. To safely check whether your password is part of this gigantic leak, make sure to head over to the\u00a0CyberNews personal data leak checker<\/strong><\/a>\u00a0or our\u00a0leaked password checker<\/strong><\/a>.<\/span><\/em><\/p>\n

“Note: <\/strong>We take our readers\u2019 privacy extremely seriously. To protect your privacy and security, the data that you enter in the search field is hashed, and we use only this hash to perform a search in our database. We do not collect entered emails or passwords, nothing is logged when you perform a leak check.<\/span><\/em><\/p>\n

Potential impact<\/strong><\/span><\/em><\/h2>\n

“By combining 8.4 billion unique password variations with other breach compilations that include usernames and email addresses, threat actors can use the RockYou2021 collection to mount password dictionary and password spraying attacks against untold numbers of online accounts.\u00a0<\/span><\/em><\/p>\n

“Since most people reuse their passwords across multiple apps and websites, the number of accounts affected by credential stuffing and password spraying attacks in the wake of this leak can potentially reach millions, if not billions.<\/span><\/em><\/p>\n

What to do if your password was leaked?<\/strong><\/span><\/em><\/span><\/h2>\n

“If you suspect that one or more of your passwords may have been included in the RockYou2021.txt collection, we recommend taking the following steps in order to secure your data and avoid potential harm from threat actors:<\/span><\/em><\/p>\n