# MA-314.062012: MyCERT Alert - LinkedIn Member Passwords Compromised

**Date:** 07 Jun 2012  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-314.062012  
**Advisory ID:** MA-314.062012

---

**1.0 Introduction**
LinkedIn, a professional social networking website, has confirmed that some of its user passwords have been compromised.
"We can confirm that some of the passwords that were compromised correspond to LinkedIn accounts," LinkedIn said in a blog post on its site. "We are continuing to investigate this situation." [1]
LinkedIn is now taking a few steps for the compromised accounts, which are:
- Members that have accounts associated with the compromised passwords will notice that their LinkedIn account password is no longer valid.
- These members will also receive an email from LinkedIn with instructions on how to reset their passwords. There will not be any links in this email. Once you follow this step and request password assistance, then you will receive an email from LinkedIn with a password reset link.
- These affected members will receive a second email from our Customer Support team providing a bit more context on this situation and why they are being asked to change their passwords.
**2.0 Recommendation**
MyCERT advises all users of LinkedIn to change their password and follow best practices for managing passwords [3][4]. MyCERT also does not recommend users to enter their passwords to websites offering services for checking for compromised passwords.
MyCERT can be reached at the following channel:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#432e3a20263137032e3a202631376d2c31246d2e3a)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT   to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**3.0 References**
i - <http://blog.linkedin.com/2012/06/06/linkedin-member-passwords-compromised/>
ii - [http://www.linkedin.com](http://www.linkedin.com/)
iii - <http://www.microsoft.com/security/online-privacy/passwords-create.aspx>
iv - <http://cybersafe.my/cyberorganization-protecting-passwords.html>