2012 Credential breach — 68.6M accounts
Data compromised
Email addresses, Passwords (hashed), Addresses
Technical writeup
Email addresses and hashed passwords (SHA1, bcrypt) stolen. Full scope revealed in 2016 when 5GB database circulated on dark web. Forced password resets for pre-mid-2012 accounts.
Root cause
Credential theft; hashed passwords exfiltrated.