Security Experts:

Connect with us

Hi, what are you looking for?


Email Security

Study Reveals 75 Percent of Individuals Use Same Password for Social Networking and Email

According to a week-long study conducted by Internet security company BitDefender, over 250,000 user names, email addresses, and passwords used for social networking sites can easily be found online.

According to a week-long study conducted by Internet security company BitDefender, over 250,000 user names, email addresses, and passwords used for social networking sites can easily be found online.

The study also revealed that 75 percent of social networking username and password samples collected online were identical to those used for email accounts.Social Networking Password Trends

The sensitive user data was gathered from blogs, torrents, online collaboration services and other sources. It was found that 43 percent of the data was leaked from online collaboration tools while 21 percent of data was leaked from blog postings. Meanwhile, torrents and users of other social hubs were responsible for leaking 10 percent and 18 percent of user data respectively.

BitDefender warned social media users to be careful when setting up passwords for social networking platforms and email. The researchers managed to verify the leaked email accounts and found that 75 percent of users had one common password for social networking and accessing their email. Additionally, the study revealed that 87 percent of email IDs, user names, and passwords gathered from various sources were still active.

RelatedPassword Purgatory – Are we Ever Going to Get Passwords Right?

Cybercriminals could easily use this sensitive user data to hijack email accounts and social networking profiles and can further be used to spread spam and malware across those platforms.

BitDefender has advised users to be extra careful while creating passwords for social networking and email accounts and avoid using the same password just for the sake of convenience. Considering the fact that online collaboration tools are not that adept in protecting sensitive user information, users have been told to be more careful the next time they decided to share their emails, user names and passwords with a third party website.

The study conducted by BitDefender follows the release of a torrent containing a list of 171 million Facebook users, complete with their names and Facebook URLs. The security researcher who released the list for download explained that he was able to extract the names and URLs of Facebook users from a directory offered by the website itself. Facebook has maintained that the directory only contains the information users have themselves chosen to make public and can also be found via search engines.

Related Reading: Move Over ‘123456’: Passwords Go High-Tech Too

Related Reading: Password Purgatory – Are we Ever Going to Get Passwords Right?

Subscribe To SecurityWeek RSS Feed

Follow SecurityWeek on Twitter

Written By

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.


Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.


Expert Insights

Related Content

Cloud Security

Microsoft and Proofpoint are warning organizations that use cloud services about a recent consent phishing attack that abused Microsoft’s ‘verified publisher’ status.


The easiest way for a cyber-attacker to gain access to sensitive data is by compromising an end user’s identity and credentials. Things get even...


The North Korean APT tracked as TA444 is either moonlighting from its previous primary purpose, expanding its attack repertoire, or is being impersonated by...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Email Security

Microsoft is urging customers to install the latest Exchange Server updates and harden their environments to prevent malicious attacks.

Application Security

Password management firm LastPass says the hackers behind an August data breach stole a massive stash of customer data, including password vault data that...


The Single Most Important Part of Dealing with a Phishing Attack is Preparing for the Attack Before it Actually Happens.