2009 — RockYou!: The site did not allow users to use special…
Technical writeup
The site did not allow users to use special characters or punctuation in their passwords and e-mailed user passwords in plain text. Hackers took advantage of these security lapses, using simple techniques to gain access to 32 million user accounts.
Root cause
Hacked