Incident
incident:rockyou
Also: RockYou breach
The 2009 breach in which approximately 32 million RockYou accounts and plaintext passwords were taken and disclosed.
The 2009 breach in which approximately 32 million RockYou accounts and plaintext passwords were taken and disclosed.
“Tom downloaded 32 million user accounts from rockyou.com.”
“TechCrunch was the first report on it saying that 32 million user records were stolen”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | INITIAL_ACCESS_VIA | SQL injection | Explicit | 33 |
| outgoing | COMPROMISES | RockYou | Explicit | 33 |
| outgoing | INVOLVES | SQL injection vulnerability | Explicit | 33 |
| outgoing | INVOLVES | Imperva | Explicit | 33 |
| outgoing | CONTAINS | RockYou password list | Explicit | 33 |
| outgoing | INVOLVES | Children’s Online Privacy Protection Act | Explicit | 33 |
| outgoing | INVOLVES | Federal Trade Commission | Explicit | 33 |
| incoming | CONTAINS | Have I Been Pwned? | Derived | 33 |
Have I Been Pwned? CONTAINS RockYou
The website is described as collecting and publishing public and semi-public breach data, including breach details such as RockYou.
Derived Direction flagged Confidence 78% · Jack Rhysider EP 33 Details
“He collects all the breach data and puts it into his database”
RockYou INITIAL_ACCESS_VIA SQL injection
The RockYou breach began through a SQL injection vulnerability in rockyou.com.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“rockyou.com was vulnerable to SQL injection”
The RockYou incident involved unauthorized access to and theft of RockYou's user database.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“Tom posts to his blog saying that he’s taken 32 million accounts from the rockyou.com website”
RockYou INVOLVES SQL injection vulnerability
The breach involved RockYou's SQL injection vulnerability, which was later fixed after notification.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“They worked all weekend to resolve this SQL injection on their site”
Imperva was involved when a security researcher at the company warned RockYou about the vulnerability.
Explicit Confidence 98% · Jack Rhysider EP 33 Details
“a security researcher at Imperva saw the forum post that rockyou.com was vulnerable to a SQL injection”
RockYou CONTAINS RockYou password list
The breach data was used to create a file containing all 32 million extracted passwords.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“He extracted only the passwords out of the dump, all 32 million of them, and put them in a text file.”
RockYou INVOLVES Children’s Online Privacy Protection Act
The FTC determined that RockYou's handling of children's data violated requirements under COPPA.
Explicit Confidence 98% · Jack Rhysider EP 33 Details
“The FTC determined that RockYou had known that children were users on the site and they didn’t protect their data which put them in violation of these rules.”
RockYou INVOLVES Federal Trade Commission
The Federal Trade Commission investigated the breach and fined RockYou over its handling of children's records.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“The FTC investigated the breach and found that RockYou had stored almost 180,000 children’s records”