Tetiba terima pemberitahuan supaya segera ganti password akun LinkedIn, diriku gak langsung ngelakuin. Kirain cuman hacking spam, berhubung pernah nerima hal serupa di akun medsos sebelah.
Etapi ketika beneran gak bisa login, baru deh panik. Hehehe.
Rupanya emang ada maintenance dari pihak LinkedIn karena dicurigai ada masalah sekuriti.
Yang menarik buatku sih ini: “… We have begun to invalidate passwords for all accounts created prior to the 2012 breach that haven’t updated their password since that breach. …”
Wow, masa sih aku blom pernah ganti password sejak 2012? Kayaknya udah beberapa kali deh brooohhh…
Artikel lengkapnya bisa dibaca di https://blog.linkedin.com/2016/05/18/protecting-our-members.
Protecting Our Members
May 18, 2016
In 2012, LinkedIn was the victim of an unauthorized access and disclosure of some members’ passwords. At the time, our immediate response included a mandatory password reset for all accounts we believed were compromised as a result of the unauthorized disclosure. Additionally, we advised all members of LinkedIn to change their passwords as a matter of best practice.
Yesterday, we became aware of an additional set of data that had just been released that claims to be email and hashed password combinations of more than 100 million LinkedIn members from that same theft in 2012. We are taking immediate steps to invalidate the passwords of the accounts impacted, and we will contact those members to reset their passwords. We have no indication that this is as a result of a new security breach.
We take the safety and security of our members’ accounts seriously. For several years, we have hashed and salted every password in our database, and we have offered protection tools such as email challenges and dual factor authentication. We encourage our members to visit our safety center to learn about enabling two-step verification, and to use strong passwords in order to keep their accounts as safe as possible.
UPDATE: May 18, 5:30 p.m. PT
We’re moving swiftly to address the release of additional data from a 2012 breach, specifically:
We have begun to invalidate passwords for all accounts created prior to the 2012 breach that haven’t updated their password since that breach. We will be letting individual members know if they need to reset their password. However, regularly changing your password is always a good idea and you don’t have to wait for the notification. Feel free to reset your password by following the directions here.
We have demanded that parties cease making stolen password data available and will evaluate potential legal action if they fail to comply. In the meantime, we are using automated tools to attempt to identify and block any suspicious activity that might occur on affected accounts.
