The records of 700m LinkedIn users are being sold online on a popular hacking forum just two months after the data of 500m users of the business-focused social network was sold off in a similar way.
According to a new report from the VPN review site PrivacySharks, a cybercriminal going by the handle “GOD User Tom Liner” recently posted on the hacking forum RaidForums to announce that they were in possession of 700m records.
In order to prove these claims, they provided a sample of 1m records which PrivacySharks’ researchers analyzed for authenticity to discover that they contained a wealth of personal information including full names, gender, email addresses, phone numbers and industry information.
During the data leak that occurred back in April of this year, LinkedIn confirmed in a statement that the user records for sale online were collected from a number of websites and companies as well as from publicly viewable member profile data. As a result, it wasn’t actually a data breach as no data had been stolen from the company but instead was scraped from other sources.
Scraped data
Just like with the previous data leak, it turns out that the 700m LinkedIn records being sold online were collected from previous leaks. However, as PrivacySharks does not support sellers of stolen data, its researchers were unable to verify all of the records.
In a statement to PrivacySharks, corporate communications manager at LinkedIn, Leona Spilman provided further insight on the origins of this latest collection of stolen user records, saying:
“While we’re still investigating this issue, our initial analysis indicates that the dataset includes information scraped from LinkedIn as well as information obtained from other sources. This was not a LinkedIn data breach and our investigation has determined that no private LinkedIn member data was exposed. Scraping data from LinkedIn is a violation of our Terms of Service and we are constantly working to ensure our members’ privacy is protected.”
LinkedIn users whose personal information is included in this latest data leak could become the target of spam campaigns or possibly even victims of identity theft. For this reason, it is recommended that affected users change their passwords immediately and use a password manager to generate new passwords that are strong, complex and unique.
Via PrivacySharks