The RockYou incident involved unauthorized access to and theft of RockYou's user database.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“Tom posts to his blog saying that he’s taken 32 million accounts from the rockyou.com website”
Organisation
organisation:rockyou
Also: rockyou.com
Social-media application company whose website and user database were breached in 2009.
Social-media application company whose website and user database were breached in 2009.
“Rockyou.com was a popular American website at the time.”
“They raised ten million dollars in funding, then another three million.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Explicit | 33 | |
| outgoing | USES | MySpace | Explicit | 33 |
| outgoing | USES | Plaintext password storage | Explicit | 33 |
| outgoing | USES | Password hashing | Explicit | 33 |
| incoming | COMPROMISES | RockYou | Explicit | 33 |
| incoming | DEVELOPED_BY | SuperWall | Explicit | 33 |
The RockYou incident involved unauthorized access to and theft of RockYou's user database.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“Tom posts to his blog saying that he’s taken 32 million accounts from the rockyou.com website”
SuperWall DEVELOPED_BY RockYou
RockYou built the SuperWall Facebook application.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“they built a Facebook app called SuperWall back in 2007”
RockYou built and operated applications integrated with Facebook, including SuperWall.
Explicit Confidence 95% · Jack Rhysider EP 33 Details
“They were also making social media games, too. They were killing it on Facebook and MySpace”
RockYou applications required users to log in to MySpace, and RockYou stored those MySpace credentials.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“RockYou would capture these MySpace logins and store them on their own site again in clear text”
RockYou USES Plaintext password storage
RockYou stored user passwords and social-media credentials in clear text rather than hashing or encrypting them.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“RockYou had been storing the user passwords in clear text”
RockYou USES Password hashing
After the breach, RockYou began hashing its passwords.
Explicit Confidence 99% · Jack Rhysider EP 33 Details
“They started hashing their passwords after that, too.”