[TheRecord] Hackers leak LinkedIn 700 million data scrape

A collection containing data about more than 700 million users, believed to have been scraped from LinkedIn, was leaked online this week after hackers previously tried to sell it earlier this year in June.

The collection, obtained by The Record from a source, is currently being shared in private Telegram channels in the form of a torrent file containing approximately 187 GB of archived data.

Image: The Record

The Record analyzed files from this collection and found the data to be authentic, with data points such as:

LinkedIn profile namesLinkedIn IDLinkedIn profile URLLocation information (town, city, country)Email addresses

Image: The Record

While the vast majority of the data points contained in the leak are already public information and pose no threat to LinkedIn users, the leak also contains email addresses that are not normally viewable to the public on the official LinkedIn site.

Linked to users’ real-life names and personas, the email addresses and the leak are a gold mine for threat actors looking to target high-profile executives or employees working in sensitive areas of a company, such as financial departments or security teams.

Fortunately, the leak does not include email addresses for each and every user, meaning that the vast majority of the entries included in this leak are worthless.

Contacted via email earlier this week, LinkedIn deferred comment to its June 2021 official statement.

At the time, LinkedIn said that no data breach occurred, and the data was scraped off LinkedIn but also other sites as well.

In fairness, the company might be getting the raw end of the stick in this situation, as data scraped off its website and enriched with email addresses from other sources might not be something that LinkedIn can control, and the company can’t be blamed for threat actors collecting public data needed to power its service in the first place.

But in the general picture, incidents of scraping public sites have also been getting more common, such as scrapes of Clubhouse, Instagram, and Facebook data.

While the data they collect is typically considered public information and not particularly sensitive in any way, these collections are still sought after for other purposes, such as building OSINT databases and enriching them with information from multiple sources in order to have a better understanding of the would-be victims threat actors would like to select and target in the future.

The post Hackers leak LinkedIn 700 million data scrape appeared first on The Record by Recorded Future.

Source: Read More (The Record by Recorded Future)

You might be interested in …

[TheRecord] Black Hat apologizes for erasing ‘they’ pronoun from non-binary speaker’s bio

A technology law expert scheduled to give a talk on August 4 at Black Hat accused conference organizers of transphobia after removing their pronouns from a submitted speaker bio. Kendra Albert, a clinical instructor at Harvard Law School’s Cyberlaw Clinic, is part of the panel for a Briefing called “Smashing the ML Stack for Fun […]

Read More

[ThreatPost] Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop

All posts, ThreatPost

A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices. Source: Read More (Threatpost)

Read More

[ZDNet] Apple slams the brakes on plans to scan user images for child abuse content

All posts, ZDNet

Backlash stemming from privacy concerns has delayed the rollout. Source: Read More (Latest topics for ZDNet in Security)

Read More

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.