Weakest passwords driving world cyber breaches – full listing of mixtures to keep away from | UK

The 16 Billion Password Mega Leak (2025): The web was rocked by one of many largest knowledge dumps in historical past, aggregating 16 billion stolen credentials right into a single leak. The breach laid naked the truth of recent password reuse, with “admin” and “password” showing tens of thousands and thousands of instances. These credentials shortly flooded darkish internet markets, promoting for as little as $10 apiece.

McDonald’s Monopoly VIP Mishap (2025): Resulting from a easy administrative error, database usernames and passwords had been by chance emailed to prize winners, exposing credentials for staging and manufacturing servers. Whereas catastrophe was averted by an moral recipient who reported it, Mitchell notes, “A single misconfiguration or forgotten password rule can put total networks in danger.”

The Louvre’s Open Door: Following an audacious jewel heist on the Louvre in 2025, a resurfaced 2014 safety report revealed the museum’s CCTV community password was shockingly simply “LOUVRE.” As Mitchell factors out, if digital safety appears to be like lazy, criminals will assume bodily defenses are weak, too.

Yahoo’s Billion-Greenback Breach (2013-2016): Hackers compromised 3 billion consumer accounts over a number of years. Yahoo’s delayed disclosure led to $35 million in fines, 41 class-action lawsuits, and an enormous hit to public belief, proving that password negligence can alter the destiny of company giants.