More than a billion plaintext passwords from third-party data breaches are freely available on the internet. The human tendency to reuse passwords across multiple services means these credentials remain a serious threat, especially for smaller organizations. The Department of Homeland Security and Department of Justice, Bank of America and Wells Fargo said their agencies were unaffected. The trove of data also includes email addresses and passwords for people working at all levels of government in countries around the world including police, military, and spies. Be sure to blacklist all breached passwords in your organization, as this is now a best-security practice.”]

