At least one hacker has penetrated the user e-mails and passwords on RockYou.com. E-mails and passwords were stored in plain text and was vulnerable because of aSQL security holes. This happened even after a security firm warned RockYou about their vulnerabilities. A class action lawsuit was filed against RockYou on December 28 at the U.S. District Court in Northern California.

Alan Claridge, a RockYou member, accused RockYou for not securing data. The civil lawsuit claims unlawful, unfair and fraudulent business practices, and violation of consumer protection legislation. RockYou raised a total of $119 million from Sequoia Capital, Partech International, Lightspeed Venture Partners, DCM, and Softbank.