RockYou: SQL Injection Attack Exposes 32 Million User Passwords

A hacker was able to break into the database of RockYou and obtain 32 million clear-text passwords through an SQL vulnerability. Researchers at database security firm Imperva discovered the flaw in RockYou.com, which provides applications and services for social networking sites like Facebook and MySpace. Imperva notified the site then issued a warning about the flaw, Amichai Shulman, CTO of Imperva, told SCMagazineUS.com on Tuesday.

But before RockYou could fix the bug, at least one hacker, using the alias

The link for this article located at SC Magazine is no longer available.