Slashdot Mirror
LinkedIn User? Your Data May Be Up For Sale (zdnet.com)
An anonymous reader cites a ZDNet report: Reports indicate that a LinkedIn data breach may have led to the sale of sensitive data belonging to 117 million users. The company's website experienced a data breach in 2012, but the true consequences of the breach are only now becoming apparent. Users of LinkedIn's website in 2012 discovered that roughly 6.5 million user account passwords were posted online, and the company never completely confirmed just who was impacted by the security incident. However, a hacker called "Peace" told the publication that this information is being sold on the dark web for roughly $2,200, and paid hacker data search engine LeakedSource also claims to have the data. Both sources say there are approximately 167 million accounts in the data dump, 117 million of which have both emails and encrypted passwords.LinkedIn has acknowledged the breach. In a blog post, the company writes: Yesterday, we became aware of an additional set of data that had just been released that claims to be email and hashed password combinations of more than 100 million LinkedIn members from that same theft in 2012. We are taking immediate steps to invalidate the passwords of the accounts impacted, and we will contact those members to reset their passwords. We have no indication that this is as a result of a new security breach.
Hackers already got my background investigative interview file from the government. LinkedIn data will confirm my employment dates.
Anally change your password annually and there's not a problem.
How does LinkedIn have any sensitive data? All the data I put up there I did so specifically to share with as many people as possible with the hope of getting job offers.
Please sell away. Hell give it away.
If you're a linked in user, YOUR DATA IS UP FOR SALE
Its in the terms and conditions. They've been doing it since day one, its their business model, its well known.
Now you're concerned that someone else stole it and is selling it?
You put the data on a public website with the intention of showing it to others. There is no reason for you to be doing anything on linked in that you do not intend to be public.
How can they 'steal' data that you are intentionally begging people to take? Thats the point of linked in to its users, YOU WANT PEOPLE TO 'STEAL YOUR DATA' on linked in.
Do you guys get shocked when you write your name and phone number on the bathroom wall and then random people call you? Thats how stupid this story is.
Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
It's Linkedin.
The question isn't IF your data is for sale, it's whether Linkedin is selling it directly or whether a hacker's taken it and is selling it for cheaper.
So really, Linkedin's bitch is actually that they're probably being undercut in the marketplace.
-Styopa
which have both emails and encrypted passwords
that claims to be email and hashed password combinations
Well, which is it? Huge difference.
Isn't Linkedin the site where if my friend joins and leaves a box checked because he didn't read carefully, they download his entire contact list and spam all of his contacts, and I repeatedly get emails saying that he's joined and I should join too?
Handing your info to a company whose ethical standards allow them to pull shenanigans like this is pretty much the same thing as hackers getting your info.
It's like naming your favourite bogeyman. Way to miss the point, lusers.
"may"?
Obliteracy: Words with explosions
What the hell do you think LinkedIn's business model is?
Your data is for sale. You need to hope they don't make up extra things about you to sell.
This did serve as a reminder that I should change my LinkedIn Password though :)
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
There is a whole lot of data in a Resume, which people post to LinkedIn as it is required for job hunting. Sure, you can restrict access to viewers of your resume but they have _YOUR_ credentials so _YOUR_ resume can be easily accessed.
These hackers with your resume would have access to street addresses, phone numbers, email addresses, Twitter handles, and other aliases and information people normally include in resumes. It may not be your SSN and bank account information, but sure can be used for Social Engineering and more nefarious purposes.
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
Anytime you give any info to any organization, it is up for sale. Even the effin' Post Office.
That's LinkedIn's business model.
Why would you care if someone else does it too?
I've already received a bogus Link request that was phishing attack!
How does LinkedIn have any sensitive data?
Dates of employment and where. Helps answering questions at the credit bureaus and banks when opening credit and getting money.
Coupled with an Internet search I can get enough information to steal your identity.
If you have a Facebook page and friend your mother and she friends with other relatives, I can get your mother's maiden name.
In other words, you're dogmeat to a half-assed identity theif.
That's what folks don't get - it's NOTHING to connect the dots in this day and age and create a profile of just about anyone.
"LinkedIn User? Your Data May Be Up For Sale "
LinkedIn has obviously been selling user data for almost 4 years.
The only contacts you get today are from salesmen. Do you think they just "happened" on your profile online?
Did you know the word "gullible" is not in the dictionary?
If you're using Linkedin your data is already for sale, that's the entire point of Linked in.
I found it a tad suspicious when LinkedIn was offering up contact suggestions from people I've only had contact with through paypal.
The hackers will probably sell it less and take better care of it than Linkedin did.
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
Knowledge is power and there are lots of folks and orgs around who yearn for power.
In other words: don't put too info much into these crapcloud services. Use pseudonyms if possible. Use wrong birthdays.
Send encrypted files to potential employers; send the key through another channel.
Set up false social media name, false email address, false birthday and so on. No need to aid the controlfreaks...
you get SHOCKED when somebody steals it from the guy that was going to sell it and then sells it?????
And THIS is what gets people upset?
(sigh/facepalm) There's just no fixing stupid.
Indeed - using them as an excuse to rant against the government and pretend the government murdered them all as some sort of elaborate plot is doing exactly that.
I only point out how deranged you are to other each time you write something worthy of it. You post a LOT but get the consequences of your former actions infrequently.
Your post was about job titles so it's perfectly ontopic to discuss the title you turkey slap into the face of every reader despite it being worthless and misleading outside of the office you work in.
Inquiring minds want to know; in fact might prefer this alternate me.
Who still works at the same place now as 2012?
Clearly someone stuck in desktop support. The smarter people passed the IQ test and have switched jobs, maybe twice, since 2012 getting a 15-30% raise each time.
I suppose if you have a handicap or won't relocate, you might be stuck. That's a life choice. I do know a blind admin who doesn't plan to ever leave his job at a university. That makes sense.