Several social media accounts belonging to Facebook CEO Mark Zuckerberg were hacked over the weekend, after Saudi Arabian attackers reportedly found his credentials in the recent LinkedIn data dump.
The hacking group, posting on Twitter under the name the OurMine Team, claimed that the social network supremo reused a shockingly primitive password for his Twitter and Pinterest accounts. Originally, the hackers indicated they had also accessed Zuckerberg’s Instagram account, although Facebook denied this.
The password, reportedly found in the recent dump of data from a 2012 LinkedIn hack, was said to be dadada.
The OurMine Team’s Twitter account has been suspended.
Internet security experts said that this high-profile breach points to a more widespread problem. The use of simple passwords and especially the reuse of identical passwords for multiple accounts means that hackers may be able to access professional accounts of many users who don't pay enough attention to choosing their passwords.
“It’s been demonstrated time after time that the simple username and password combination is a fundamentally flawed approach to internet security,” said Richard Parris, is CEO of UK headquartered cybersecurity company Intercede.
“It is time the organisations generating significant revenue from consumers stopped playing fast and loose with security and adopted more sophisticated approaches. Security must be embedded into the very fabric of the technology ecosystem, from the silicon chips that power our smartphones and connected cars, to the services and apps we use in our day-to-day lives.”
Zuckerberg hasn’t been an avid Twitter user. He has last tweeted in 2012. Also, the Pinterest account was barely used as Zuckerberg has only posted there about 30 images. In spite of that, the account has been followed by 600,000 people.