Analysing over 1 million leaked passwords from the UK's biggest companies

guest · May 25, 2020

Why Is 3sYqo15hiL Such A Popular Password?
May 25, 2020
https://www.forbes.com/sites/daveyw...solved-cybersecurity-advice-password-manager/

Improving your password hygiene is one of the most important things you can do to strengthen your security, so why is 3sYqo15hiL such a popular choice?

So, with passwords being an important, and some would argue the most important part of your security posture as a user, choosing the right ones is critical.
I'm hoping you are not one of those who has pushed 123456 to the top of the most used passwords list, either.

However, I've just been reading an analysis of more than one million leaked passwords found within the data from FTSE100 company breaches and 3sYqo15hiL slapped me in the face like a wet fish in a Monty Python sketch.
Click to expand...

3sYqo15hiL was, the analysis revealed, the 21st most used password within this breach data. Which begs the question, why the heck is that? Luckily, the people at Passlo who performed the FTSE100 data breach analysis had the answer.
Click to expand...

Passlo: Analysing over 1M leaked passwords from the UK's biggest companies

How do some of the UK's biggest companies fair when it comes to passwords? Does their large size — and presumably their large cyber security budgets — mean better password hygiene by their employees?
GVC Holdings do not appear in any breach lists and Ashtead Group have just 1 leaked password which is very surprising given they have 28,000 and 15,809 employees respectively.

Nothing overly exciting and what we would expect to find from any random sample of passwords. Password #6 "vodafone" caught my eye as Vodafone ranks fairly well at 82nd on the FTSE100 list with 25,402 leaked passwords [...]
The curious case of 3sYqo15hiL
At #21 we see the password "3sYqo15hiL" which is not typically a common password and perhaps surprisingly appears at around position 13,000 from a random sample. The password is only attributed to @sc.com (Standard Chartered) accounts within our FTSE100 data set.

[...] So the most likely explanation is sort of spam bot network. Searching more broadly, here's a breakdown of the top 10 providers used to register these accounts: [...]
Click to expand...

Log in or Sign up

Analysing over 1 million leaked passwords from the UK's biggest companies

guest Guest

Log in or Sign up

Analysing over 1 million leaked passwords from the UK's biggest companies

guest Guest

Useful Searches