Things aren’t looking good for LinkedIn right now, as the world’s largest job-finding platform reported a massive data breach for the second time since April 2021.
The hack reportedly exposed the data of more than 700 million LinkedIn profiles, which is more than 92 percent of the total 756 million user-base that the platform currently holds. While the exposure appears to be tremendous, many publishers and analysts have stated that the hacker mistakenly “misused” LinkedIn’s API to download the data, a method that was used in April’s breach.
LinkedIn has submitted an official response for its user-base, which said,
While we’re still investigating this issue, our initial analysis indicates that the dataset includes information scraped from LinkedIn as well as information obtained from other sources. This was not a LinkedIn data breach and our investigation has determined that no private LinkedIn member data was exposed. Scraping data from LinkedIn is a violation of our Terms of Service and we are constantly working to ensure our members’ privacy is protected.
While the platform appears to be denying the underlined reports, the hacker who obtained the data posted a sample of one million records for sale on the dark web as proof, and many analysts have checked and confirmed that the data is genuine and up to date.
Although the hack didn’t expose any passwords, this is still valuable data. It can be used for identity theft and phishing attempts which could very well help obtain login credentials for LinkedIn and other platforms.
If possible, update your account security settings to avoid falling victim to any further exposure.