Pakistanis angry over detentions in Times Sq. case Monday, May 24, 2010
ISLAMABAD – Relatives of three men detained by Pakistan for alleged links to the suspect in the attempted Times Square bombing say the men are innocent.
They
AFP - Thursday, August 6TAIPEI (AFP) - - Taiwan's Beijing-friendly government on Wednesday denied boycotting an Australian film festival amid a row over the e
BERLIN (Reuters) - Chancellor Angela Merkel suffered a double blow on Thursday as a senior party ally in east German
Minister seeks closure of anti-Berlusconi websites Wednesday, December 16, 2009
ROME (AFP) - – The Italian government moved Tuesday to close down Internet sites encouraging further violence against Prime Minister Silvio Berlusconi, who
By ELAINE KURTENBACH,AP Business Writer AP - Wednesday, March 18SHANGHAI - Asia's stock market rally seemed to be running out of steam Wednesday, despite an
Edition:
U.S.
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
Home
Business
Business Home
Economy
Technology
Media
Small Business
Legal
Deals
Earnings
Social Pulse
Business Video
The Freeland File
Markets
Markets Home
U.S. Markets
European Markets
Asian Markets
Global Market Data
Indices
M&A
Stocks
Bonds
Currencies
Commodities
Futures
Funds
peHUB
World
World Home
U.S.
Brazil
China
Euro Zone
Japan
Mexico
Russia
India Insight
World Video
Reuters Investigates
Decoder
Politics
Politics Home
Election 2012
Tales from the Trail
Political Punchlines
Supreme Court
Politics Video
Tech
Technology Home
MediaFile
Science
Tech Video
Tech Tonic
Social Pulse
Opinion
Opinion Home
Chrystia Freeland
John Lloyd
Felix Salmon
Jack Shafer
David Rohde
Bernd Debusmann
Nader Mousavizadeh
Lucy P. Marcus
David Cay Johnston
Bethany McLean
Edward Hadas
Hugo Dixon
Ian Bremmer
Lawrence Summers
Susan Glasser
The Great Debate
Steven Brill
Jack & Suzy Welch
Frederick Kempe
Christopher Papagianis
Breakingviews
Equities
Credit
Private Equity
M&A
Macro & Markets
Politics
Breakingviews Video
Money
Money Home
Tax Break
Lipper Awards 2012
Global Investing
MuniLand
Unstructured Finance
Linda Stern
Mark Miller
John Wasik
James Saft
Analyst Research
Alerts
Watchlist
Portfolio
Stock Screener
Fund Screener
Personal Finance Video
Money Clip
Investing 201
Life
Health
Sports
Arts
Faithworld
Business Traveler
Entertainment
Oddly Enough
Lifestyle Video
Pictures
Pictures Home
Reuters Photographers
Full Focus
Video
Reuters TV
Reuters News
Article
Comments (1)
Follow Reuters
Facebook
Twitter
RSS
YouTube
Read
Argentina loses a third of its dollar deposits
08 Jun 2012
For election favor, Obama looks to Merkel, again
08 Jun 2012
Defamation action filed over Miss USA rigging claim
08 Jun 2012
Lil Phat Dead: Trill Entertainment Rapper, 19, Killed in Atlanta Shooting
08 Jun 2012
Obama says it's clear U.S. economy "not doing fine"
1:06am EDT
Discussed
277
Florida to continue voter purge in defiance of warning
142
Wisconsin recall vote to resonate in presidential race
141
Marijuana initiative could make or break Obama in Colorado
Watched
Self-adjusting glasses a clear alternative for the developing world
Fri, Jun 8 2012
A look at the UK’s most beautiful face
Thu, May 10 2012
An apology in Afghanistan
Fri, Jun 8 2012
LinkedIn breach puts site's reputation on the line
Tweet
Share this
Email
Print
Related News
Exclusive: Business software IPOs hope to trump market woes
Fri, Jun 8 2012
LinkedIn works with FBI on password theft
Thu, Jun 7 2012
LinkedIn, eHarmony suffer data breaches
Thu, Jun 7 2012
LinkedIn suffers data breach
Wed, Jun 6 2012
REFILE-Security experts say LinkedIn suffered data breach
Wed, Jun 6 2012
Analysis & Opinion
Google’s antitrust problem is all about privacy
Dewey & LeBoeuf collapse highlights importance to clients of safeguarding records
Related Topics
Tech »
Media »
The sign up page of Linkedin.com is seen in Singapore, May 20, 2011.
Credit: Reuters/David Loh
By Jim Finkle and Jennifer Saba
Sat Jun 9, 2012 12:50am EDT
(Reuters) - LinkedIn Corp's silence on the extent of a security breach that exposed millions of user passwords has damaged its reputation among some business professionals, and may slow the growing company's rise if the breach turns out to be more serious than disclosed.
Several days after news of the theft of the passwords emerged, the site with more than 160 million members still says it has yet to determine the full extent of the breach.
Some cyber security experts say LinkedIn did not have adequate protections in place, and warn that the company could uncover further data-losses over coming days as it tries to figure out what happened.
LinkedIn has hired outside forensics experts to assist as company engineers and the FBI seek to determine how more than 6 million customer passwords turned up on underground sites frequented by criminal hackers.
Company spokesman Hani Durzy said LinkedIn has invalidated the stolen passwords, even though it does not know if any other account information was stolen besides passwords.
The dearth of information has left some security professionals and customers worried that LinkedIn's computer systems may have suffered a more serious breach.
"There is going to be more to come," said Jeffrey Carr, chief executive of security firm Taia Global. "As long as they don't know what happened here, there is a good chance that it is more widespread than originally thought."
Customers whose passwords were among those stolen were still getting notified by LinkedIn as of Friday afternoon, days after news of the breach first surfaced.
Laura DiDio, a technology analyst with a consulting firm known as ITIC, said that was not fast enough.
"I am angry," she said. "As soon as there was an inkling that there was a breach, they should have been all over this. I want to know what they are doing to correct this situation."
SCRUTINIZING PRACTICES
Some security experts say the company's data security practices were not as sophisticated as one would typically expect from a major Internet company.
For example, they noted that LinkedIn does not have a chief information officer or chief information security officer.
Those are positions that typically supervise technology operations and computer security at large corporations.
Company spokeswoman Erin O'Hara said the company did not have managers with those titles, but that its senior vice president for operations, David Henke, oversees LinkedIn's security team.
Several experts said the company fell down in the way it encrypted, or scrambled, the passwords that were stored in the database.
Carr of Taia Global said LinkedIn did not follow an industry standard for encryption, which requires use of a technique known as "salting" that greatly increases the amount of time and computer power needed to crack an encrypted password.
There could be legal repercussions for that failure to comply with industry standards, said Gerald Ferguson, an attorney at Baker Hostetler who is an expert on privacy and intellectual property law.
He said that LinkedIn could face lawsuits if accounts had been breached since its terms of use say it employs the industry standard for security.
"If they can demonstrate that information hadn't been comprised, that would certainly give them a defense," Ferguson said.
Company representatives declined to respond to the criticism of their techniques for protecting passwords or any potential legal implications.
Their user statement spells out the steps it will take to protect customer data and the risks customers face.
"Personal information you provide will be secured in accordance with industry standards and technology," according to the privacy policy on linkedin.com.
"Since the Internet is not a 100 percent secure environment, we cannot ensure or warrant the security of any information you transmit to LinkedIn," it cautions. "There is no guarantee that information may not be accessed, copied, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards."
NATURAL TARGET
LinkedIn is a natural target for data thieves because the site stores valuable information about millions of professionals, including well-known business leaders.
"This is the serious social networking site. This isn't the one I got to see pictures of my friend's new dog," said Mary Hildebrand, chair of the privacy practice area at the law firm Lowenstein Sandler.
The way that the company responds to the theft will play a critical role in determining the extent to which the incident damages LinkedIn's reputation, experts said.
"LinkedIn has always claimed part of their strategy is making a better user experience," said Jim Janesky, director of research at Avondale Partners.
"If this were to comprise that in LinkedIn's users minds, it could slow down the growth of new users or limit individuals as repeat users."
Hemanshu Nigam, chief executive of security consulting firm SSP Blue, said he advised all LinkedIn members to immediately change their passwords after he heard news of the breach.
"I don't know how many emails I got from customers saying 'Thank you for telling me to change my password. I'm kind of freaked out now,'" he said.
"Companies like this survive because of their reputation," added Nigam, who previously worked as a security executive at Microsoft Corp and News Corp. "People need to make a decision: 'Can I trust them with my data or not?'"
LinkedIn shares rose 2.6 percent to $96.26 on Friday. While the breach has not appeared to hurt the stock to date, investors are likely closely watching the matter because the stock carries one of the loftiest valuations in the technology sector.
LinkedIn made a monster public debut in May 2011 and is still trading at more than double its IPO price of $45.
The shares are trading at nearly 80 times projected 2013 earnings. Google trades for about 12 times next year's earnings forecast.
Rob D'Ovidio, associate professor of criminal justice at Drexel University, said it is fair to criticize LinkedIn for the loss.
"There is a social responsibility that they have in today's day and age to use the best available security measures," he said. "I am of the personal belief to hold companies liable for these types of breaches."
(Reporting by Jim Finkle in Boston and Jennifer Saba in New York. Additional reporting by Basil Katz in New York; Editing by Richard Chang and Robert Birsel)
Tech
Media
Related Quotes and News
Company
Price
Related News
Tweet this
Link this
Share this
Digg this
Email
Reprints
We welcome comments that advance the story through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can flag it to our editors by using the report abuse links. Views expressed in the comments do not represent those of Reuters. For more information on our comment policy, see http://blogs.reuters.com/fulldisclosure/2010/09/27/toward-a-more-thoughtful-conversation-on-stories/
Comments (1)
Microbe wrote:
Edition:
U.S.
Africa
Arabic
Argentina
Brazil
Canada
China
France
Germany
India
Italy
Japan
Latin America
Mexico
Russia
Spain
United Kingdom
Back to top
Reuters.com
Business
Markets
World
Politics
Technology
Opinion
Money
Pictures
Videos
Site Index
Legal
Bankruptcy Law
California Legal
New York Legal
Securities Law
Support & Contact
Support
Corrections
Connect with Reuters
Twitter
Facebook
LinkedIn
RSS
Podcast
Newsletters
Mobile
About
Privacy Policy
Terms of Use
AdChoices
Copyright
Our Flagship financial information platform incorporating Reuters Insider
An ultra-low latency infrastructure for electronic trading and data distribution
A connected approach to governance, risk and compliance
Our next generation legal research platform
Our global tax workstation
Thomsonreuters.com
About Thomson Reuters
Investor Relations
Careers
Contact Us
Thomson Reuters is the world's largest international multimedia news agency, providing investing news, world news, business news, technology news, headline news, small business news, news alerts, personal finance, stock market, and mutual funds information available on Reuters.com, video, mobile, and interactive television platforms. Thomson Reuters journalists are subject to an Editorial Handbook which requires fair presentation and disclosure of relevant interests.
NYSE and AMEX quotes delayed by at least 20 minutes. Nasdaq delayed by at least 15 minutes. For a complete list of exchanges and delays, please click here.