LinkedIn has finally posted an update denying any account breach using the stolen passwords. It also revealed that all affected accounts are disabled now and no members of the service are at any risk.
"First, it's important to know that compromised passwords were not published with corresponding e-mail logins," The post says. "At the time they were initially published, the vast majority of those passwords remained hashed, i.e., encoded, but unfortunately a subset of the passwords was decoded. Again, we are not aware of any member information being published at any time in connection with the list of stolen passwords. The only information published was the passwords themselves."
The leak has damaged the reputation of LinkedIn badly. The popular social network for business professionals boasts of more than 160 million users. People are raising questions about whether the company had taken enough safety measures to secure its users' private information. LinkedIn has promised to focus on their security measures, days after the attack took place.
The company released some more information earlier in another blogpost which actually raised more questions than it answers. "Thus far, we have no reports of member accounts being breached as a result of the stolen passwords. Based on our investigation, all member passwords that we believe to be at risk have been disabled," the company said in its post.
LinkedIn is working with the FBI and outside forensics experts to catch the group or person behind this leak. Its shares rose 2.6 percent after the attack, which means the investors are not really concerned about this security breach.
