RockYou Admits Exposing Email Login Details

RockYou Admits Exposing Email Login Details

IT company RockYou has vowed to improve its IT security by using IT Support and apply encryption following a breach that exposed 32 million user login credentials to hackers.
Sensitive login data - stored in plain text - were left open to attack as a result of an SQL injection vulnerability in RockYou's internet site. In a statement, RockYou said the exposed password credentials applied to widgets it develops and potentially exposed user password and email addresses.



RockYou said that it was investigating the causes of the breach. In the meantime, the application developer is applying security improvements. These include encrypting all passwords and upgrading its legacy platform to the "same infrastructure and industry standard security protocols we employ on our partner applications platforms".