LinkedIn passwords for 117 million users 'up for sale'
Business networking site urges affected users to reset their passwords after security breach
A hacker claiming to have passwords belonging to 117 million LinkedIn users is advertising the data for sale online.
The extensive list of users' security details is thought to have been sourced from a cyber-attack on the business networking site in 2012.
According to the news site Motherboard, a hacker called "Peace" is selling the data on The Real Deal, a dark web illegal marketplace, for five bitcoins (£1,500).
The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.
Sign up for The Week's Free Newsletters
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
From our morning news briefing to a weekly Good News Newsletter, get the best of The Week delivered directly to your inbox.
Four years ago LinkedIn admitted to a security breach but said only 6.5 million users' account details were posted online.
The site now says the number of users affected was far greater than initially thought and they are urging anyone affected to reset their passwords.
"Yesterday, we became aware of an additional set of data that had just been released that claims to be email and hashed password combinations of more than 100 million LinkedIn members from that same theft in 2012," the company's chief information security officer Cory Scott wrote in a blog post.
"We are taking immediate steps to invalidate the passwords of the accounts impacted, and we will contact those members to reset their passwords. We have no indication that this is as a result of a new security breach."
A free daily email with the biggest news stories of the day – and the best features from TheWeek.com
For LinkedIn, the lesson is the same as four years ago: "don't store passwords in an insecure way", says Motherboard.
As for LinkedIn users, if you haven't already changed your password since the cyber-attack four years ago, "change it again", says the website, "especially if you use it on other services (and please stop reusing passwords)".
News of the breach is the latest in a long line of cyber-attacks on major websites and companies, with telecoms firm TalkTalk and parental forum Mumsnet among those who have fallen victim to security breaches in the last year.
-
Syria’s Kurds: abandoned by their US allyTalking Point Ahmed al-Sharaa’s lightning offensive against Syrian Kurdistan belies his promise to respect the country’s ethnic minorities
-
The ‘mad king’: has Trump finally lost it?Talking Point Rambling speeches, wind turbine obsession, and an ‘unhinged’ letter to Norway’s prime minister have caused concern whether the rest of his term is ‘sustainable’
-
5 highly hypocritical cartoons about the Second AmendmentCartoons Artists take on Kyle Rittenhouse, the blame game, and more
-
Israel retrieves final hostage’s body from GazaSpeed Read The 24-year-old police officer was killed during the initial Hamas attack
-
China’s Xi targets top general in growing purgeSpeed Read Zhang Youxia is being investigated over ‘grave violations’ of the law
-
Panama and Canada are negotiating over a crucial copper mineIn the Spotlight Panama is set to make a final decision on the mine this summer
-
Why Greenland’s natural resources are nearly impossible to mineThe Explainer The country’s natural landscape makes the task extremely difficult
-
Iran cuts internet as protests escalateSpeed Reada Government buildings across the country have been set on fire
-
US nabs ‘shadow’ tanker claimed by RussiaSpeed Read The ship was one of two vessels seized by the US military
-
How Bulgaria’s government fell amid mass protestsThe Explainer The country’s prime minister resigned as part of the fallout
-
Femicide: Italy’s newest crimeThe Explainer Landmark law to criminalise murder of a woman as an ‘act of hatred’ or ‘subjugation’ but critics say Italy is still deeply patriarchal