1.1.2 Real World

While it’s unlikely a child’s name will contain harmful SQL code, this kind of SQL injection vulnerability happens in the real world all the time:

• In 2012, LinkedIn leaked over 6 million users’ data due to an undisclosed SQL injection vulnerability.
• In 2012, Yahoo! exposed 450,000 user passwords.
• In 2012, 400,000 passwords were compromised from Nvidia.
• In 2012, 150,000 passwords were compromised from Adobe.
• In 2013, Harmony had roughly 1.5 million user passwords exposed.

For most of these, precise details are undisclosed. We can’t be sure these were due to SQL injection attacks, but it is likely.