RockYou

In December 2009, RockYou experienced a significant data breach that exposed the information of over 32 million users. The breach occurred due to an SQL injection vulnerability that had been known for years but was left unpatched. Compounding the issue, the company stored user data, including passwords, in an unencrypted, plain-text format, which made the compromised information readily accessible. The incident drew scrutiny from the Federal Trade Commission (FTC), leading to a settlement in 2012 that included a $250,000 civil penalty for violating the Children's Online Privacy Protection Act (COPPA) by collecting data from underage users without parental consent.

Following the breach and subsequent fallout, co-founder and CEO Lance Tokuda stepped down in November 2010, and Lisa Marino was appointed CEO in April 2011. The company attempted to pivot its strategy, acquiring game development studios like Playdemic and TirNua. From 2014 onwards, RockYou shifted its focus to acquiring the rights to classic video games, such as titles from Kabam and Disney, and re-distributing them with embedded in-game ads. Despite these efforts, which included acquiring numerous well-known game titles, the company struggled financially. In February 2019, after abruptly shutting down several of its popular games, RockYou filed for Chapter 7 bankruptcy, leading to the cessation of its operations.