As Scope of 2012 Breach Expands, LinkedIn to Again Reset Passwords for Some Users
Summary: LinkedIn says a 2012 breach originally reported as exposing 6.5 million hashed passwords actually affected more than 117 million accounts, after a seller offered the records on a cybercrime bazaar and LeakedSource claimed a searchable copy of the database. LinkedIn is again forcing password resets only for the subset of users believed impacted, and spokesman Hani Durzy said the company has obtained the 117 million record database and believes it is real.
Why it matters: LeakedSource says just 50 easily guessed passwords accounted for more than 2.2 million of the 117 million hashes, which were stored in SHA1 with no salting - and LinkedIn's decision to reset only a subset repeats the choice it made in 2012.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026