A security investigator recognized eight indiscreet databases that held about 60 million records of LinkedIn user information.

GDI Foundation, where the security investigator is from, is a not-for-profit association with a task to protect the free and open Internet by trying to make it safer. The researcher, Sanyam Jain, contacted Bleeding Computer when he noticed “something strange.” He came across leaky databases comprising the LinkedIn data “appearing and disappearing from the Internet under different IP addresses.”

While most of the LinkedIn data was allegedly public, some of the data contained email addresses.

“According to my analysis the data has been removed every day and loaded on another IP. After some time the database becomes either inaccessible or I can no longer connect to the particular IP, which makes me think it was secured. It is very strange,” Jain told Bleeding Computer. The total size of all of the databases was 229 GB, with each database ranging between 25 GB to 32 GB.

As an experiment, Bleeding Computer editor Lawrence Abrams asked Jain pull his record from one of the databases and examine it. According to the article, Abrams found the data contained in the record included “his LinkedIn profile information, including IDs, profile URLs, work history, education history, location, listed skills, other social profiles, and the last time the profile was updated.”

The email address Abrams used when he registered his LinkedIn account was also included. The editor has no idea how the info got onto this database as he “always had the LinkedIn privacy setting configured to not publicly display his email address.”

Each profile also contains what appears to be internal values that describe the type of LinkedIn subscription the user has and whether they utilize a particular email provider, according to Bleeding Computer. These values were labeled “isProfessional,” “isPersonal,” “isGmail,” “isHotmail” and “isOutlook.”

Bleeding Computer contacted Amazon, who was hosting the databases, and as of April 15, 2019, the databases were secured and were no longer accessible via the internet.

Head of trust and safety of LinkedIn, Paul Rockwell, said that the company is aware of claims of a threadbare LinkedIn database, adding that the probe specifies that a third-party company uncovered a set of data amassed from LinkedIn public profiles, as well as other, non-LinkedIn sources.

Leave a Reply

Your email address will not be published. Required fields are marked *