10 billion passwords leaked in massive data breach

According to security researchers, the world’s largest collection of stolen passwords has been uploaded to a notorious crime marketplace where cybercriminals exchange such credentials.

Hackers have released over 10 billion login details from accounts across LinkedIn, X (formerly Twitter), MySpace, MyFitnessPal, Canva, Badoo, and several other sites.

The person responsible for hacking the 10 billion login records goes by the pseudonym ObamaCare. The hacker named his work “RockYou2024”.

The cybercriminal acquired 8.4 billion passwords from 2021 at the latest. The remaining 1.5 billion new records are from the period 2021–2024.

The entire package containing logins and passwords was published in a .zip file with a size of approximately 50 GB. This data comes from sites:

• X (formerly Twitter – 281 million records)
• AdultFriendFinder (220 million)
• MyFitnessPal (151 million)
• LinkedIn (251 million)
• Adobe (153 million)
• Canva (143 million)
• JD.com (142 million)
• Wattpad (271 million)
• VK (101 million)
• Youku (100 million)
• Badoo (127 million)
• Deezer (1370 million)
• MySpace (360 million)
• Weibo (504 million)
• Tencent (1.5 billion)

The two portals with the most stolen login data are Chinese sites. The file regarding the Tencent platform has 1.5 billion records. Meanwhile, the one about the Weibo social platform has 504 million.

Source: https://www.forbes.com/sites/daveywinder/2024/07/05/new-security-alert-hacker-uploads-10-billion-stolen-passwords-to-crime-forum/