The Verge - LinkedIn hacked: over six million passwords compromised and published

NYT: LinkedIn security breach could have been prevented with simple security measures

2012-06-11T14:37:17Z

Last week's breach at LinkedIn resulted in the leak of 6.46 million user passwords, but with some basic security measures in place it could have been avoided. The New York Times reports that "on a grading scale of A through F, experts say, LinkedIn, eHarmony and Lastfm.com would get, at best, a 'D' for password security" because the three sites — all of which were hacked last week — only took one step to secure user passwords. The article explains that an inexpensive way to securely store user data is to first hash the passwords, then to salt them, then to hash them again and store them on secure servers, but the three sites that were hacked last week only took the first step in this process. LinkedIn says that "prior to news" of...

LinkedIn: 'No email logins have been published' following password leak, law enforcement investigating

2012-06-07T23:46:38Z

LinkedIn has yet to receive any reports of unauthorized account access after 6.5 million user passwords were posted online by hackers, the company said in a blog post today. Although the perpetrators managed to crack and reveal a "small set" of hashed passwords, LinkedIn hasn't seen any evidence indicating that the email addresses tied to those credentials have also been shared.

"To the best of our knowledge, no email logins associated with the passwords have been published" says Director Vicente Silveira. He adds that the professional networking site is now working with law enforcement to investigate the breach, a process we imagine has only intensified thanks to similar attacks carried out on other popular web destinations in the days...

LinkedIn confirms that member passwords have been compromised

2012-06-06T19:54:35Z

Reports started swirling this morning that more than six million users had their account passwords stolen, and now the company has confirmed the security breach with a post on its blog — though the company hasn't yet confirmed how many accounts were compromised.

Affected users will receive an email from LinkedIn with instructions on how to reset their password. This doesn't appear to be the standard password reset procedure, either — any affected user will automatically be locked out of their account, and the password reset email being sent by LinkedIn won't contain any links to the site. LinkedIn will also be sending affected members a second email from their customer service department detailing the circumstances behind the breach....

LinkedIn investigating reports that 6.46 million hashed passwords have leaked online (update)

2012-06-06T12:32:40Z

UPDATE: LinkedIn confirms hacking. Read more here.

A user in a Russian forum is claiming to have hacked LinkedIn to the tune of almost 6.5 million account details. The user uploaded 6,458,020 hashed passwords, but no usernames. It's not clear if they managed to download the usernames, but it's likely that both have been downloaded.There is a possibility that this could be a hoax, but several people have said on Twitter that they found their real LinkedIn passwords as hashes on the list. Many of the hashes include "linkedin," which seems to add credence to the claims.

We spoke with Mikko Hypponen, Chief Research Officer at F-Secure, who thinks this is "a real collection." He told us he is "guessing it's some sort of exploit on their web...