LinkedIn users’ passwords leaked onto a Russian web forum

LinkedIn is investigating claims that over six million of its users’ passwords have been leaked onto the internet.

Hackers posted a file containing encrypted passwords onto a Russian web forum.

They have invited the hacking community to help with decryption.

LinkedIn, which has over 150 million users, has not released a formal statement, but tweeted: “Our team is currently looking into reports.”

LinkedIn is investigating claims that over six million of its users' passwords have been leaked onto the internet

The news comes as the social networking website was forced to update its mobile app after a privacy flaw was uncovered by security researchers.

Skycure Security said the mobile app was sending unencrypted calendar entries to LinkedIn servers without users’ knowledge.

The information included meeting notes, which often contain information such as dialling numbers and passcodes for conference calls.

In response LinkedIn said it would “no longer send data from the meeting notes section of your calendar”.

The company stressed that the calendar function was an opt-in feature.

However, the researchers who uncovered the flaw said the transmission of the data to LinkedIn’s servers was done without a “clear indication from the app to the user”.

In a statement posted on the company’s blog, LinkedIn’s mobile product head Joff Redfern said a new “learn more” link would be added to the app so users have a clearer picture about how their information is being used and transmitted.

RSA Distributed Credential Protection splits passwords in two to foil hacker attacks Top 10 passwords used in hacked Yahoo! accounts Most common passwords used online in 2012 Twitter resets hacked passwords Twitter hacked: up to 250,000 passwords stolen iPhone 5S pictures leaked online? Pinterest is unexpectedly losing users this month Facebook changes users email address without notification

Short URL: http://www.bellenews.com/?p=20145