Data breaches by the dozens happen every day. Cybercriminals are constantly coming up with new ways to access databases loaded with sensitive information they can sell on the dark web or use for future attacks. If the daily news has you wondering about the biggest data breaches of all time, we have answers for you. Read on to explore the worst breaches to date, what caused them, how were they discovered, and what consequences we are all still living with.<\/p>\n\n\n\n
According to data breach statistics<\/a>, the largest data breach in history is the one that Yahoo! suffered for several years. Not only is it the biggest breach according to the number of affected users, but it also feels like the most massive one because of all the headlines.<\/p>\n\n\n\n The flood of ongoing news coverage is understandable. It took the company a long time to figure out just how big a data leak it was dealing with, so news kept dribbling out. It turned out the company was hacked by Russian spies, giving the security breach an even grimmer outlook. The world’s biggest data breach has recently returned to the front pages because of a class action lawsuit and settlement payments to affected users.<\/p>\n\n\n\n In September 2016, Yahoo! notified the public that 500 million user accounts had been breached in a 2014 cyberattack. A state-sponsored actor was suspected to be behind the attack. Just three months later, the company came forward again, saying that it discovered another breach that had occurred in August 2013. At the time, Yahoo! estimated that 1 billion user accounts had been affected, making it one of the worst data breaches of all time. After the FBI got involved, it was determined that all 3 billion Yahoo! accounts had been compromised, making it a breach of unprecedented size.<\/p>\n\n\n\n The hack of Yahoo! users was orchestrated by two hackers, Latvian Alexey Belan and Canadian Karim Baratov. They were hired by Russia\u2019s Federal Security Service, the FSB, to get their hands on information belonging to several high-profile persons. The hacking duo targeted Russian journalists, employees of a Russian cybersecurity company, and Russian officials. Other targets of what turned out to be the biggest data breach ever were the CTO of a French transportation company, a Shanghai-based managing director of a US private equity firm, a Nevada gaming official, and 14 employees of a Swiss Bitcoin banking firm.<\/p>\n\n\n\n Belan and Baratov sent Yahoo! employees a series of spear-phishing emails containing a malware<\/a> download link. All it took for hackers to gain access to the company\u2019s network was a single click by one staff member.<\/p>\n\n\n\n Once they were inside the network, the was to find the user database and internal tools that were used to alter the data. They quickly accomplished both goals of this major cyber attack. Making sure not to lose access to the network, they created a back door on a Yahoo! server. They returned in December 2014 to download a copy of the entire user database.<\/p>\n\n\n\n Names, phone numbers, security questions and answers, as well as password recovery emails and a cryptographic value unique to each account were copied by the attackers.<\/p>\n\n\n\n When the company realized it was a victim of the biggest hack of all time and notified everyone with a Yahoo! account, the public was shocked. A class action lawsuit ensued. Under the terms of settlement, Yahoo! has agreed to create a settlement fund worth $117,500,000 to compensate for the damage it caused American and Israeli users. Affected individuals can opt for at least two years of credit monitoring services that include identity-theft monitoring or a cash reimbursement ranging from less than $100 to a maximum of $358.80. As for the perpetrators of the Yahoo! breach, Baratov was sentenced to 5 years in prison and a fine of $2.25 million. Belan is still at large, as are the duo\u2019s FSB collaborators.<\/p>\n\n\n\n 2019 kicked off with a massive data breach when the so-called Collection #1 database surfaced in mid-January. It contained a staggering mass of credentials – 773 million unique email addresses and more than 21 million passwords. The data, approximately two or three years old, was a collection of credentials acquired in previous high-profile company data breaches, including the LinkedIn and Dropbox breaches of 2016,<\/p>\n\n\n\n This was just the beginning. By the end of January 2019, four subsequent databases – Collections #2-5 – became available for free download on Torrent websites. In total, these five databases revealed 2.2 billion unique credentials. The revealed data wasn\u2019t all that sensitive – no credit card information or Social Security numbers were disclosed. But the sheer amount of data makes it one of the biggest data breaches of all time.<\/p>\n\n\n\n Troy Hunt, the man behind the breach notification website haveibeenpwned.com<\/a>, was the first to draw public attention to the existence of Collection #1. In mid-January, several people directed him to the cloud storage website Mega<\/a>, where he found the treasure trove. Collection #1 was an 87 gigabyte database containing nearly 2.7 billion rows of email addresses and passwords. Hunt went through considerable trouble to clean up the database by eliminating duplicates and stripping out unusable bits of data that were scattered in 12,000 files.<\/p>\n\n\n\n Following Hunt\u2019s notification, the database was removed from Mega – but it was still available on underground hacking forums. The information exposed in this recent data breach from early 2019 was being sold for just $45. Before long it could be downloaded from many sites for free.<\/p>\n\n\n\n Brain Krebs, a cybersecurity journalist<\/a> running his own website, got in on the investigation. He contacted the hacker selling Collection #1 and learned there were four additional leaks in the works. The remaining collectionswere exposed by the end of January.<\/p>\n\n\n\n Collections #2-5 were like a Frankenstein\u2019s monster of information obtained in recent security breaches – Yahoo!, LinkedIn – and some not-so-recent exploits like the MySpace breach of 2008. A staggering amount of information was distributed – 845 gigabytes. In most cases, only credentials were shared. A total of 2.2 unique user names and associated passwords were exposed in all 5 collections.<\/p>\n\n\n\n It could have been worse. Most of the information that was revealed is outdated. Years have passed since the data obtained in the MySpace breach first started circling the dark web. When it was first offered for sale, it was going for a much heftier price than $45.<\/p>\n\n\n\n What makes this incident one of the top data breaches ever is that it opened our eyes to the fact that hackers have been sharing and saving a lot of the data breached in the earlier attacks. It is most valuable to cybercriminals who want to perform credential stuffing attacks. Given the bad habit of using the same password for multiple websites, hackers can deploy an automated process that uses email and password combinations until it gains access to a website. This puts people at risk of dangerous attacks like phishing, fraudulent loan applications, unauthorized purchases, and money transfers.<\/p>\n\n\n\n To avoid becoming a victim of future major security breaches, you should change your passwords from the standard one or two you are using to unique and complex ones for each website. Password management tools are of great assistance.<\/p>\n\n\n\n The Aadhaar breach is the perfect example of a massive cybersecurity incident if ever there was one. The world\u2019s largest ID database, Aadhaar, was established by the Unique Identification Authority of India in 2009. The database contained information on more than 1.1 billion Indian citizens, including a 12-digit unique identity number, fingerprint scans of all 10 fingers, two iris scans, name, gender, and contact information.<\/p>\n\n\n\n Most Indians have an Aadhaar card even though it isn\u2019t mandatory. However, the card is required when applying for state aid or financial assistance, buying a cellular SIM card, opening a bank account, enrolling in utilities, and getting other bureaucratic things done. The news of the Aadhaar database being hacked broke in January 2018, making the biggest data breaches of 2018 list.<\/p>\n\n\n\n Malicious actors infiltrated the Aadhaar database through the website of a state-owned utility company named Indane. The utility provider is connected to the government database through an application programming interface that allows applications to retrieve data stored by other applications or software. Regrettably, Indane\u2019s API had no access controls. This left the company\u2019s data vulnerable. And the data of its customers, too. And every Aadhaar card owner.<\/p>\n\n\n\n Karan Saini, a New Delhi-based security researcher, discovered this system weakness and notified the state-owned company that one of the largest data breaches in history was looming. In addition to lacking access security controls, the flawed API could also allow an attacker to go through every permutation of an Aadhaar number, receiving in-depth information every time it made a hit. Saini\u2019s warnings were met with nothing but denial by the UIDAI on Twitter<\/a>.<\/p>\n\n\n\n US tech portal ZDNet also got involved. Its reporters emailed Indian authorities regarding the latest security breaches in the government database several times, but to no avail. An entire month went by and they got no reply. Then the ZDNet team reached out to the Indian Consulate in New York and explained the issue to the consul of trade and customs. Two weeks passed without any action to take down the exposed database. It wasn\u2019t until March 23, 2018, after ZDNet published the story to its American audience, that Indian authorities took the vulnerable access point offline.<\/p>\n\n\n\n A staggering amount of data was revealed in one of the biggest government breaches of all time. The database with information on 1.1 billion citizens had been sitting unprotected for years. In it were names, addresses, photos, phone numbers, and emails, as well as biometric data like fingerprints and iris scans. This turned out to be a credit breach too, since the database also held information about bank accounts connected with the unique 12-digit number. Before the breach was exposed, the Indian government made a tweet denying that it stored that bank information<\/a>.<\/p>\n\n\n\n The extremely poor security measures deployed by UIDAI is likely to have ongoing catastrophic consequences. Virtually all Indian adults became potential victims of identity theft and other crimes stemming from it. The worst part is – the information from this recent data breach of 2018 had already fallen into the wrong hands before the vulnerability was eliminated.<\/p>\n\n\n\n Reporters at India\u2019s Tribune newspaper were able to purchase stolen data from hackers who were offering it through a Whatsapp group. It cost only $7 to get someone\u2019s personal information. For an additional $4 they obtained software to print fake Aadhaar cards. The consequences of this mega breach remain to be seen.<\/p>\n\n\n\n First American Financial Corp., the largest title insurance provider in the US, exposed 885 million records in one of the biggest data breaches of 2019. Real-estate buyers and sellers partner up with First American to secure property transactions, sharing in-depth personal and financial information with the company. Instead of protecting the sensitive data it collects, the insurance company let it sit unprotected on its website, accessible to everyone and anyone.<\/p>\n\n\n\n The unguarded database was first discovered by Brian Krebs, an independent security journalist. Krebs was tipped off about this major data breach by a Washington-based real estate developer who was working with First American. He was the one who first noticed that First American\u2019s website was leaking records – potentially hundreds of thousands of them. He realized that anyone who knew the URL of a valid document on the insurance company\u2019s website could view other documents just by editing a single digit in the link. After getting no response from First American, he got in touch with Krebs. On May 24, he reported the news on his cybersecurity blo<\/a>g. After that, it went viral.<\/p>\n\n\n\n Recent cyber attacks, like the ones targeting Marriott and Equifax, were the doing of malicious third parties who were out to get valuable data. In the case of First American, the company itself was responsible for making its records publicly available to anyone who knew where to look.<\/p>\n\n\n\n The website leaked bank account numbers and statements, mortgage and tax documents, wire transaction receipts, Social Security numbers, and drivers license images dating back to 2003. It was a gold mine for identity thieves. It is still unclear whether cybercriminals downloaded copies of the data and if so, what they plan to do with it.<\/p>\n\n\n\n The day Kerbs published the story, the company took down the parts of its website that were spilling precious data. However, when First American made a public announcement about the events that put millions of Americans in danger of identity theft, it seriously downplayed its own responsibility in the matter. The recent data breach was characterized as \u201ca design defect in the web application that may or may not have had an effect on the security of customer information.\u201d<\/p>\n\n\n\n New York’s Department of Financial Services immediately launched an investigation into the security failure that exposed 16 years\u2019 worth of digital documents. The U.S. Securities and Exchange Commission began looking into the matter as well, in August 2019. The results are pending.<\/p>\n\n\n\n As for the potential victims, they have filed a class action lawsuit accusing the insurance giant of failing to implement even rudimentary security measures.<\/p>\n\n\n\n Among the data spills of 2019, the one affecting verifications.io took everyone by surprise – mostly because people had never heard of this company before, yet it managed to leak 800 million personal and business records. Verifications.io LLC describes itself as a \u201cbig data email verification platform.\u201d It is hired by marketing companies to verify the validity of email addresses used in advertising campaigns. Basically, verifications.io does the heavy lifting of verifying millions of email addresses to ensure that they are active before marketers start contacting them. And then it wound up on the list of companies with data breaches.<\/p>\n\n\n\n In an ocean of cyber security breaches where companies are targeted by data-thirsty hackers, this incident was more of a data leak. Luckily, it was discovered by white-hat cybersecurity researchers<\/a> who notified the company right away. Bob Diachenko and Vinny Troia uncovered an unprotected 150GB MongoDB database. To their surprise, it held both personal and business information. After their discovery of the cybersecurity breach, Diachenko and Troia notified the administrators of verifications.io, who immediately took down the database. It hasn\u2019t been restored since, and the company website was deactivated too.<\/p>\n\n\n\n As soon as the pair began analyzing the publicly available data that they had stumbled across, they knew they were dealing with one of the biggest data breaches of the year. The researchers found four databases containing names, email addresses, social media data, home addresses, phone numbers, gender, and birth dates. There was also delicate information about people\u2019s credit scores – characterizations like average, below average, and above average.<\/p>\n\n\n\n Other data was related to companies that could be used for generating sales leads. Company names, annual revenue figures, websites, industry identifiers for categorizing companies called SIC and NAIC, and fax numbers could be found. Diachenko and Troia got in touch with a fellow white-hatter, Troy Hunt, who runs Have I been pwned<\/a>, a website where people can determine whether their data has been breached. Hunt cross-referenced the newly discovered dataset with information obtained in recent breaches and some not so recent. It turned out to be fresh.<\/p>\n\n\n\n It is always bad when huge amounts of personal and business information become available for public download. People whose data was exposed in this cyber breach are in danger of phishing and scamming attacks. On the other hand, there were no passwords, no Social Security numbers, and no credit card information. What\u2019s more, a lot of the info contained in the verifications.io database was already publicly available. And the company took down the database right after learning about the vulnerability.<\/p>\n\n\n\n The Equifax breach was colossal in many ways. First and foremost, it was gargantuan because of the extremely sensitive information that got leaked. It was huge in terms of the number of affected individuals. That\u2019s enough to make it rank high among significant security breaches.<\/p>\n\n\n\n But there\u2019s more. The notification process was slow. In the six weeks between realizing there was a breach and notifying the public, executives sold lots of Equifax stock, raising suspicions of insider trading. And it is one of the largest data breaches when it comes to the settlement fee – a staggering $700 million.<\/p>\n\n\n\n Forensic analysis determined that the system was breached on March 10, 2017. The attackers exploited a vulnerability of the customer complaint portion of the Equifax website. A patch for that widely known software weakness had been released three days earlier, but Equifax\u2019s IT staff had not yet installed the update. This is how one of the biggest hacks of all time began.<\/p>\n\n\n\n Equifax\u2019s information security team didn\u2019t notice the system vulnerabilities or unpatched software despite having run a series of scans aimed at discovering them on March 15. It remains unclear why system scans failed to detect the problems. Be that as it may, the attackers stayed more or less dormant until May 2017.<\/p>\n\n\n\n Then they moved from the compromised server to other parts of Equifax\u2019s network and stole data thanks to yet another mistake. Equifax was 10 months late renewing the annual public key certificate it used to decrypt, analyze, and re-encrypt data pulled from the internal network. This lapse allowed the cyberthieves to extract terabytes of sensitive information unnoticed, landing Equifax on the list of biggest companies hacked in 2017. On July 29, system administrators finally became aware of the attack. A month of forensic investigation ensued. The public was informed of the breach on September 8.<\/p>\n\n\n\n A series of slip-ups at the credit reporting agency led to the theft of approximately 605 million records belonging to 147 million Americans. Some 40% of the population got some of the following data exposed: name, date of birth, Social Security number, address, gender, phone number, driver\u2019s licence number, email address, taxpayer ID, drivers license, and passport photo. And unlucky 200,000 individuals suffered a credit card breach too. This is information that can be used for a number of illegal activities. An identity thief could use it to open new credit card accounts or get a loan or open fake social media accounts or commit fraud posing as the victim. The possibilities are endless.<\/p>\n\n\n\n The list of companies that have been hacked in the last decade is a long one. The Equifax case is unique because of the type of customer information it leaked. Affected individuals filed a class action lawsuit that was resolved in 2019. The company is to pay a total of $700 million to damaged parties. Considering the number of people whose information was leaked, each person is entitled to a maximum settlement of $125.<\/p>\n\n\n\n Cybersecurity specialists continue to monitor the dark web for massive dumps of the stolen data. Since none of it has appeared for sale, some believe that Chinese state actors were responsible. Their goals are thought to be espionage, not theft.<\/p>\n\n\n\n During its 15 years of existence, Facebook has had more than its fair share of cybersecurity breaches. With approximately 2.3 billion active monthly users, Facebook collects and stores enormous amounts of data 0 and tends to spill a lot of it, quite frequently. Maybe you remember the Cambridge Analytica scandal of 2016, for example, when the personal information of 87 million U.S. voters got exploited by consultants working on Trump\u2019s presidential campaign.<\/p>\n\n\n\n Or the two recent data breaches of 2019, uncovered within a month of CEO Mark Zuckerberg\u2019s announcement of Facebook plans to \u201cpivot to privacy\u201d in March 2019. The first of the security breach examples revealed that Facebook and Instagram passwords of millions of users, dating back to 2012, were left unencrypted on company servers and accessible to 20,000 Facebook employees. The second involved two third-party app developers, Cultura Colectiva and At the Pool, and 540 million records about user tastes and preferences. We\u2019ll explore that one in more detail.<\/p>\n\n\n\n It\u2019s wasn\u2019t large scale cyber attacks that led to these breaches. It was the social media giant\u2019s inability to protect the massive quantities of information it collects. A team of cybersecurity investigators at UpGuard<\/a> discovered two databases on Amazon\u2019s publicly accessible S3 cloud service. One belonged to a Mexican media company Cultura Colectiva, the other to a Facebook-integrated app called At the Pool. Both were available for download; both contained a social engineer\u2019s pot of gold.<\/p>\n\n\n\n Upon the discovery of the poorly configured databases on the Amazon cloud, the UpGuard team reached out to Cultura Colectiva and At the Pool. They emailed Cultura Colectiva on January 10 and again on January 14, but they never got a response. The UpGuard team then contacted Amazon Web Services in late January. AWS took note of the recent security breach and said it would inform the database owner of the incident. Two months passed and the data stayed online. It was only in April, when Bloomberg questioned Facebook about the leak, that the databases were secured. As for the database belonging to At the Pool, it was taken down during UpGuard\u2019s investigation.<\/p>\n\n\n\n Data stemming from the Cultura Colectiva breach was 145GB. It consisted of more than 540 million records revealing likes, comments, reactions, account names, and Facebook IDs. The At the Pool database was smaller but contained even more detailed information: users\u2019 likes, photos, books, movies, music, friends, groups, check-in, events, interests, and 22,000 unencrypted passwords.<\/p>\n\n\n\n The information that was available for public download on the Amazon cloud is much like the data released in the Cambridge Analytica breach. It can be used for future hacking cases by malicious actors who want to perform social engineering attacks. Or it could be used to sway an election.<\/p>\n\n\n\n The curious thing is that no matter how many breaches the social media website has and regardless of nearly constant Facebook hack news, billions of users still stay on the network. No legal action has been taken so far regarding these two user security breaches, though Facebook has been sued multiple times for violating user privacy.<\/p>\n\n\n\n When we look at the list of recent data breaches, the one that affected the world\u2019s largest chain of hotels definitely stands out. Affecting approximately 500 million records, among them sensitive credit card information and passport numbers, it is classified as a major breach. One year after the leak was discovered, it remains unclear who was behind it. The fact that the stolen records haven\u2019t ended up on the dark web, paired with the fact that Marriott is the main hotel provider for U.S. military and government officials, focus suspicions on Chinese state-sponsored actors.<\/p>\n\n\n\n One of the latest data breaches, the Marriott leak was discovered in late 2018. A red flag was detected when a suspicious attempt to access the guest reservation system of Marriott\u2019s Starwood brands was made on September 8. Two days later, third-party investigators were hired to look into the incident and to help implement containment measures.<\/p>\n\n\n\n Investigators worked quickly, and on September 17, 2018, they found what caused the data leak. A remote access Trojan – a type of malware that lets hackers secretly access, monitor, and even control a computer – was used by cybercriminals in the Marriott breach. The malicious actors also deployed Mimikatz, a tool for finding combinations of usernames and passwords in system memory. Armed with the credentials of one of the system administrators, the attackers made the suspicious guest database query on September 8. The query was caught by Accenture, the IT security company that has monitored all Starwood hotel databases since before the merger with Marriott.<\/p>\n\n\n\n Marriot purchased Starwood Hotels and Resorts in 2016. Following the acquisition, all of Starwood\u2019s corporate employees were discharged, including the staff responsible for information security. Since the Marriott booking system wasn\u2019t immediately able to handle reservations made in thousands of Starwood hotels, reservations made in those hotels continued to go through the virus-infected Starwood system. Investigators hired by Marriott discovered that the Starwood security breach happened back in 2014 and went on unnoticed for four years.<\/p>\n\n\n\n During the time hackers had access to guest data, they accessed 500 million records. Full names, gender, email addresses, telephone numbers, mailing addresses, passport numbers, and credit card information were leaked. Even though the credit card numbers were protected by encryption, the encryption keys were recklessly stored on the same server that got raided by the hackers. Some of the passport numbers that got exposed in one of the biggest data breaches ever were encrypted, others were not.<\/p>\n\n\n\n So far, millions of affected guests are relieved that their sensitive information, which could be used for identity theft, hasn\u2019t been posted for sale on the dark web. However, if cybercrime investigators are right to believe that the reason for the attacks was gathering intelligence on US officials, then the consequences could be much more far-reaching.<\/p>\n\n\n\n As for Marriott, most of the expenses were borne by its insurance company. By May 2019, the costs associated with the recent data breaches amounted to $72 million. Marriott\u2019s cyber insurance policy covered $71 million of it. The hotel industry giant was issued a $120 million fine by the UK Information Commissioner\u2019s office, but it has yet to pay. Several class action lawsuits have been filed by affected guests and are yet to be resolved.<\/p>\n\n\n\n When we look back at the last decade of information security breaches, 2016 was a memorable year. Before the gravity of the Yahoo! hack was publicized at the end of the year, the Friend Finder Networks leak was considered the biggest among data breaches of 2016. Some 20 years\u2019 worth of data – 412 million records on users of the adult entertainment and dating network – were exposed due to a malicious attack. The affected individuals were registered users of five websites under the Friend Finder Networks umbrella – adultfriendfinder.com, penthouse.com, cams.com, iCams.com and stripshow.com.<\/p>\n\n\n\n The data hacks that occurred in October 2016 were reported on Twitter by a vulnerability researcher who goes by two pseudonyms – Revolver and 1\u00d70123. He had discovered flaws on the Adult Friend Finder website that allowed unauthorized parties access to the site\u2019s databases. Aware of the fact that the local file inclusion flaws could lead to major data breaches, he notified Adult Friend Finder of his discovery. Just 12 hours later, Revolver reported that he had worked with Adult Friend Finder and resolved the issue. He added that customer information hadn\u2019t left the website.<\/p>\n\n\n\nHow Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the Yahoo! Breach?<\/h3>\n\n\n\n
2. Collection #1-5 Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the Collection #1-5 Data Breach?<\/h2>\n\n\n\n
3. Aadhaar Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the Aadhaar Breach?<\/h3>\n\n\n\n
4. First American Financial Corp. Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the First American Breach?<\/h3>\n\n\n\n
5. Verifications.io Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the Verifications.io Breach?<\/h3>\n\n\n\n
6. Equifax Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the Equifax Breach?<\/h3>\n\n\n\n
7. Facebook Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of This Facebook Security Breach?<\/h3>\n\n\n\n
8. Marriott Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n
What Records Were Leaked?<\/h3>\n\n\n\n
What Are the Consequences of the Marriott Hack?<\/h3>\n\n\n\n
9. Friend Finder Networks Data Breach<\/h2>\n\n\n\n
\n
How Did It All Happen?<\/h3>\n\n\n\n