{"id":26346,"date":"2019-03-21T17:52:07","date_gmt":"2019-03-21T17:52:07","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/"},"modified":"2019-03-21T17:52:07","modified_gmt":"2019-03-21T17:52:07","slug":"lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/","title":{"rendered":"Let&#8217;s spin Facebook&#8217;s Wheel of Misfortune! Clack-clack-clack&#8230; clack&#8230; You&#8217;ve won &#8216;100s of millions of passwords stored in plaintext&#8217;"},"content":{"rendered":"<p>Facebook today admitted it stored &#8220;some&#8221; of its addicts&#8217; account passwords in a plaintext readable format. For &#8220;some&#8221;, read hundreds of millions.<\/p>\n<p>The antisocial network quietly made the mea culpa in a <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/newsroom.fb.com\/news\/2019\/03\/keeping-passwords-secure\/\">statement<\/a> that followed its breathless announcement of the Oculus Rift S Virtual Reality headset. The password snafu confession was, as far as we can tell, forthcoming from the Silicon Valley giant only after investigative journalist Brian Krebs <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/krebsonsecurity.com\/2019\/03\/facebook-stored-hundreds-of-millions-of-user-passwords-in-plain-text-for-years\/\">blew the lid off<\/a> the blunder.<\/p>\n<p>Facebook said it realized its error in January, during a security review, and discreetly fixed the problem. Affected users can expect to receive a notification, although the Mark-Zuckerberg-run biz did not state if they would be required to change their password.<\/p>\n<p>Keen to downplay the screw-up, Facebook protested that &#8220;these passwords were never visible to anyone outside of Facebook.&#8221; And as for insiders getting their hands on the credentials? In a not-very-reassuring statement, the creepy ad-slinger asserted: &#8220;We have found no evidence to date that anyone internally abused or improperly accessed them.&#8221;<\/p>\n<p>The snafu affects hundreds of millions of Facebook Lite fans, tens of millions of other Facebook account holders, and tens of thousands of Instagrammers \u2013 somewhere between 200 and 600 million total, according to Krebs&#8217; sources&#8217; estimates.<\/p>\n<p>As users logged in, their passwords were stored in a readable format that could be accessed via internal systems. Basically, it logged the credentials in plaintext, and Facebook engineers were allowed to peruse those logs while looking for bugs and faults, though we&#8217;re assured no one did anything bad with the sensitive data. This is the same biz that <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2019\/03\/01\/facebook_teentracking_app\/\">this month lied<\/a> about how many teens were using its market-research-slash-surveillance app, and has <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2018\/12\/20\/facebook_disaster\/\">repeatedly lied<\/a> in the past, so take the statement with a pinch of salt.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2019\/03\/19\/shutterstock_discrimination.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"discrimination\"><\/p>\n<h2 title=\"Ad targeting system overhaul to stop landlords from discriminating based on race\">In a humiliating climbdown, Facebook agrees to follow US laws<\/h2>\n<p><a href=\"https:\/\/www.theregister.co.uk\/2019\/03\/19\/facebook_ad_agreement\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>Facebook Lite is the lower-bandwidth version of the platform, ideal for regions without the greatest connectivity. Such as, er, <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2017\/12\/15\/one_million_homes_still_receiving_subpar_broadband_speeds_ofcom\/\">chunks of rural Blighty<\/a>, for example.<\/p>\n<p>We asked the <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2019\/03\/15\/new_zealand_murder\/\">snuff-flick slinger<\/a> how long it had been storing passwords in this way, how many employees had access to the data and what controls it had in place to stop the data leaving its hallowed halls. Facebook has yet to reply. We understand at least some of the passwords were logged as early as 2012.<\/p>\n<p>It has not been a great week for the social media giant, coming hot on the heels of an impressive <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2019\/03\/14\/facebook_server_configuration\/\">14-hour outage<\/a> following a mystery &#8220;configuration change&#8221; and a quiet shuffling of feet and staring at shoes regarding its <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2019\/03\/19\/facebook_ad_agreement\/\">ad targeting system and discrimination<\/a>.<\/p>\n<p>The megacorp has the usual perfunctory advice for those twitchy about security, including not reusing passwords over multiple systems and picking strong and complex character combinations. It also suggests that two-factor authentication could be used.<\/p>\n<p>Or just don&#8217;t use the thing at all. There&#8217;s a thought.<\/p>\n<p>And as for the idiot visor announced yesterday, with a resolution quite some way behind HP&#8217;s Reverb device, which also debuted this week, we suspect that the &#8220;S&#8221; in Oculus Rift S stands for the same word users will utter when they get their password notification.<\/p>\n<p>Spoiler: it isn&#8217;t &#8220;Super&#8221;. \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1810\/-7143\/cloud-security-from-start-point-to-end-point?td=wptl1810\">Cloud Security: From Start Point to End Point<\/a><\/p>\n<p>READ MORE <a href=\"http:\/\/go.theregister.com\/feed\/www.theregister.co.uk\/2019\/03\/21\/facebook_passwords\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Credentials logged for years is antisocial network&#8217;s latest Zuck-up Facebook today admitted it stored &#8220;some&#8221; of its addicts&#8217; account passwords in a plaintext readable format. For &#8220;some&#8221;, read hundreds of millions.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":26347,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-26346","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Let&#039;s spin Facebook&#039;s Wheel of Misfortune! Clack-clack-clack... clack... You&#039;ve won &#039;100s of millions of passwords stored in plaintext&#039; 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Let&#039;s spin Facebook&#039;s Wheel of Misfortune! Clack-clack-clack... clack... You&#039;ve won &#039;100s of millions of passwords stored in plaintext&#039; 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-21T17:52:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/03\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Let&#8217;s spin Facebook&#8217;s Wheel of Misfortune! Clack-clack-clack&#8230; clack&#8230; You&#8217;ve won &#8216;100s of millions of passwords stored in plaintext&#8217;\",\"datePublished\":\"2019-03-21T17:52:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/\"},\"wordCount\":559,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/\",\"name\":\"Let's spin Facebook's Wheel of Misfortune! Clack-clack-clack... clack... You've won '100s of millions of passwords stored in plaintext' 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg\",\"datePublished\":\"2019-03-21T17:52:07+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/03\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Let&#8217;s spin Facebook&#8217;s Wheel of Misfortune! Clack-clack-clack&#8230; clack&#8230; You&#8217;ve won &#8216;100s of millions of passwords stored in plaintext&#8217;\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Let's spin Facebook's Wheel of Misfortune! Clack-clack-clack... clack... You've won '100s of millions of passwords stored in plaintext' 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/","og_locale":"en_US","og_type":"article","og_title":"Let's spin Facebook's Wheel of Misfortune! Clack-clack-clack... clack... You've won '100s of millions of passwords stored in plaintext' 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-03-21T17:52:07+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/03\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Let&#8217;s spin Facebook&#8217;s Wheel of Misfortune! Clack-clack-clack&#8230; clack&#8230; You&#8217;ve won &#8216;100s of millions of passwords stored in plaintext&#8217;","datePublished":"2019-03-21T17:52:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/"},"wordCount":559,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/03\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/","url":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/","name":"Let's spin Facebook's Wheel of Misfortune! Clack-clack-clack... clack... You've won '100s of millions of passwords stored in plaintext' 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/03\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg","datePublished":"2019-03-21T17:52:07+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/03\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/03\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/lets-spin-facebooks-wheel-of-misfortune-clack-clack-clack-clack-youve-won-100s-of-millions-of-passwords-stored-in-plaintext\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Let&#8217;s spin Facebook&#8217;s Wheel of Misfortune! Clack-clack-clack&#8230; clack&#8230; You&#8217;ve won &#8216;100s of millions of passwords stored in plaintext&#8217;"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/26346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=26346"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/26346\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/26347"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=26346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=26346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=26346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}