TechHackers leak 10 billion login records: Urgent password changes recommended

Hackers leak 10 billion login records: Urgent password changes recommended

A massive data leak. 9.9 billion passwords from several popular websites.
A massive data leak. 9.9 billion passwords from several popular websites.
Images source: © Unsplash
Bartłomiej Nowak

9 July 2024 09:02

Everyone with an account on LinkedIn, X (formerly Twitter), MySpace, MyFitnessPal, Canva, Badoo, and several other sites should change their passwords immediately. Hackers have released over 10 billion login records.

The perpetrator stealing nearly 10 billion login records goes by the pseudonym ObamaCare. The hacker boasted about his work, which he named "RockYou2024".

The cybercriminal acquired 8.4 billion passwords that date back to 2021 at the latest. The remaining 1.5 billion new records are from the period 2021–2024.

Christmas came early this year. I present to you the new RockYou2024 password list containing over 9.9 billion passwords - wrote the user ObamaCare on the forum.

The entire package containing logins and passwords was published in a .zip file with a size of 50 GB. This data comes from the following sites:

                                                          
  • X (formerly Twitter – 281 million records),
  • AdultFriendFinder (220 million),
  • MyFitnessPal (151 million),
  • LinkedIn (251 million), Adobe (153 million),
  • Canva (143 million),
  • JD.com (142 million),
  • Wattpad (271 million),
  • VK (101 million),
  • Youku (100 million),
  • Badoo (127 million),
  • Deezer (1,369 million),
  • MySpace (360 million),
  • Weibo (504 million),
  • Tencent (1.5 billion).

The two portals with the most stolen login data are Chinese sites. The file regarding the Tencent platform has 1.5 billion records. Meanwhile, the one about the Weibo social platform has 504 million.

Every internet user can check if their data has been stolen. Enter your password on the Cybernews site.

If your password has been stolen, it must be changed immediately on all accounts where it was used for logging in. Experts advise choosing strong, unique combinations and using password managers and multi-factor authentication.

See also