Over six million LinkedIn users’ passwords leaked online

Published on 06/06/2012 18:43

LinkedIn is probing claims that more than six million members’ passwords have been stolen.

• Professional social networking site may have had more than six million users’ passwords stolen

• Passwords do not include associated email addresses, according to data protection firm

• Users urged to change passwords as criminal activity suspected

The site has more than 161 million members across 200 countries.

A message on the company’s Twitter page said: “Our team is currently looking into reports of stolen passwords. Stay tuned for more.”

Users have been urged to change their security details immediately following the posting of a file containing 6.5 million passwords online.

IT security and data protection firm Sophos said the leaked encrypted data does not include associated email addresses.

However, it warned that hackers will be working to crack the “unsalted” password hashes and “it is reasonable to assume that such information may be in the hands of the criminals”.

Graham Cluley, senior technology consultant at Sophos, said: “It would seem sensible to suggest to all LinkedIn users that they change their passwords as soon as possible as a precautionary step.

“Of course, make sure that the password you use is unique - in other words, not used on any other websites - and that it is hard to crack.

“If you were using the same passwords on other websites, make sure to change them too. And never again use the same password on multiple websites.”