[ THREAT ARCHIVE :: 2024 ]
EXPOSURE SCALE: 9,948,575,739 RECORDS
RockYou2024 Compilation — What Was Leaked & How to Check If You're In It
In July 2024, a threat actor known as "ObamaCare" published `rockyou2024.txt` on a hacker forum, containing 9,948,575,739 unique plaintext passwords compiled from modern and historical data breaches.
INCIDENT YEAR: 2024
ATTACK VECTOR: Aggregated Global Hash Cracking & De-duplication
SEVERITY RATING: CRITICAL
> COMPROMISED DATA ATTRIBUTES IN THIS BREACH:
[✓] 9.9B Unique Plaintext Passwords
[✓] Dictionary Variations
[✓] Special Character Permutations
> TECHNICAL POST-MORTEM & VECTOR ANALYSIS
- RockYou2024 represents a 14.8% increase over the 8.4 billion passwords in RockYou2021.
- It is currently the primary dictionary fed into Hashcat and John the Ripper for automated WPA2, NTLM, and bcrypt brute-force attacks.
> VERIFY IF YOUR CREDENTIALS APPEARED IN THIS DUMP
Query the DARKLEDGER multi-source engine to check if your email, username, or phone number was indexed in the RockYou2024 Compilation dataset.
> STEP-BY-STEP REMEDIATION PLAYBOOK
- Ensure every online service uses an unpredictable 16+ character password.
- Check your email and passphrases against the DARKLEDGER multi-source index.
> FREQUENTLY ASKED QUESTIONS ABOUT THIS BREACH
Q: Is RockYou2024 a breach of a single company?
No. It is a compilation dictionary of 9.9 billion passwords collected from thousands of breaches over 15+ years.