{"id":5391,"date":"2021-06-08T15:03:08","date_gmt":"2021-06-08T19:03:08","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=5391"},"modified":"2021-06-09T14:57:18","modified_gmt":"2021-06-09T18:57:18","slug":"rockyou2021-is-largest-password-leak-at-8-4-billion-entries","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/","title":{"rendered":"RockYou2021 is Largest Password Leak at 8.4 Billion Entries"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-4622\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\" alt=\"RockYou2021 is Largest Password Leak at 8.4 Billion Entries \" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD--360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><em><strong>A compilation file of stolen and leaked passwords, dubbed RockYou2021, recently appeared on a hacker forum. <a href=\"https:\/\/cybernews.com\/security\/rockyou2021-alltime-largest-password-compilation-leaked\/\" target=\"_blank\" rel=\"noopener\">CyberNews<\/a> reports that an anonymous forum poster uploaded a 100GB TXT file containing 8.4 billion entries of passwords. <\/strong><\/em><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Although the poster claimed the file contained 82 billion passwords, CyberNews independent analysis confirmed the number (while still staggering) is actually ten times less. However, it remains the largest password and credentials leak of its kind in history.\u00a0\u00a0<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2021\/02\/Identity_Suggestion_Engine_Horiz_800.gif\" alt=\"IAM Solution Suggestion Engine\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Given that only 4.7 billion people are online across the world, the perpetrators may have multiple passwords for millions if not billions of users. The RockYou2021 compilation file may be the stepping stone hackers are looking for to begin mass credential stuffing or more targeted credentials attacks. Since so many people were potentially affected, businesses should begin alerting employees to the danger and mandating password changes across all accounts. Additionally, enterprises should begin (if they haven\u2019t already) implementing multifactor authentication (MFA) and other critical identity management protections.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Also, your employees and administrators should take the <span style=\"text-decoration: underline\"><strong><a href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\">necessary steps<\/a><\/strong><\/span> to ensure that they make the strongest and most secure passwords possible. Despite passwords being largely ineffectual as a lone authentication factor, the combination of longtime recognition and ubiquitousness ensures their place in access management for years to come.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, your enterprise should make users aware of the tools at their disposal. Free websites like <\/span><a href=\"https:\/\/haveibeenpwned.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">haveibeenpwned.com<\/span><\/a><span style=\"font-weight: 400\"> allow users to compare their emails to thousands of breaches, seeing where they may have been compromised and prompting new credentials. Meanwhile, <\/span><span style=\"text-decoration: underline\"><strong><a href=\"https:\/\/solutionsreview.com\/identity-management\/the-top-6-password-strength-checkers-and-validation-tools\/\" target=\"_blank\" rel=\"noopener\">password checkers<\/a><\/strong><\/span><span style=\"font-weight: 400\"> can help employees determine whether their passwords actually measure up to the realities of password crackers and simple guesswork.\u00a0\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">To learn more about what RockYou2021 might mean for <span style=\"text-decoration: underline\"><strong><a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\">cybersecurity and access management<\/a><\/strong><\/span>, we reached out to the experts. Here\u2019s what they had to say.\u00a0<\/span><\/p>\n<h2 style=\"text-align: justify\"><b>RockYou2021: Impact and Advice<\/b><\/h2>\n<h3 style=\"text-align: justify\"><b>Saryu Nayyar<\/b><\/h3>\n<p style=\"text-align: justify\"><i><span style=\"font-weight: 400\">Saryu Nayyar (she\/her) is CEO of <a href=\"https:\/\/gurucul.com\/\" target=\"_blank\" rel=\"noopener\">Gurucul<\/a>.\u00a0<\/span><\/i><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cToday is the day to change all your passwords. You may have been putting this off thinking you are not affected. You are. We all are. Now you have an excellent reason &#8211; to protect your privacy and your assets. Anything and everything will come out so waste no time. Change all your passwords immediately. And please make sure they are unique and complex!\u201d<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>David Stewart<\/b><\/h3>\n<p style=\"text-align: justify\"><i><span style=\"font-weight: 400\">David Stewart is CEO of <a href=\"https:\/\/www.approov.io\/\" target=\"_blank\" rel=\"noopener\">Approov<\/a>.\u00a0<\/span><\/i><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">\u201cIt may be the biggest username\/password breach of all time but it won&#8217;t be the last. Outlawing passwords is not a short-term solution to this problem. Instead, ensure that usernames\/passwords on their own are not enough to gain access to backend systems. Adding a requirement for appropriate and independently verified factors to gain access to your servers will ensure that your business is not affected by credential stuffing attacks based on breaches such as RockYou2021.&#8221;<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Thank you to these cybersecurity experts for their time and expertise on the leak. For more, why not check out the <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-identity-and-access-management-software-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline\"><strong>Identity Management Buyer\u2019s Guide<\/strong><\/span><\/a> or the <a href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\"><span style=\"text-decoration: underline\"><strong>Solutions Suggestion Engine<\/strong><\/span><\/a>? The Suggestion Engine can compare your enterprise&#8217;s access management use case to vendor-made profiles in just 7 seconds over millions of permutations.\u00a0<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/suggestionengine.solutionsreview.com\/buyer\/signup\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2021\/02\/Identity_Suggestion_Engine_Horiz_800.gif\" alt=\"IAM Solution Suggestion Engine\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A compilation file of stolen and leaked passwords, dubbed RockYou2021, recently appeared on a hacker forum. CyberNews reports that an anonymous forum poster uploaded a 100GB TXT file containing 8.4 billion entries of passwords. Although the poster claimed the file contained 82 billion passwords, CyberNews independent analysis confirmed the number (while still staggering) is actually [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":4622,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[1573,142,1706,125,16,1522,1204,425,1705],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>RockYou2021 is Largest Password Leak at 8.4 Billion Entries<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/\",\"name\":\"RockYou2021 is Largest Password Leak at 8.4 Billion Entries\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\",\"datePublished\":\"2021-06-08T19:03:08+00:00\",\"dateModified\":\"2021-06-09T18:57:18+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg\",\"width\":800,\"height\":400,\"caption\":\"Why Identity Governance Takes on New Importance in Remote Workplaces\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"RockYou2021 is Largest Password Leak at 8.4 Billion Entries\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"RockYou2021 is Largest Password Leak at 8.4 Billion Entries","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/","url":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/","name":"RockYou2021 is Largest Password Leak at 8.4 Billion Entries","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg","datePublished":"2021-06-08T19:03:08+00:00","dateModified":"2021-06-09T18:57:18+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/11\/Cybersecurity-Better-MOD-.jpg","width":800,"height":400,"caption":"Why Identity Governance Takes on New Importance in Remote Workplaces"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/rockyou2021-is-largest-password-leak-at-8-4-billion-entries\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"RockYou2021 is Largest Password Leak at 8.4 Billion Entries"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5391"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=5391"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/5391\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4622"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=5391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=5391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=5391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}