LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021

Transcript

1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA BREACH CASE STUDY
2. 1. The Hack How it happened Tracing & attribution 2. Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda
3. Using LinkedIn to Hack LinkedIn A little social engineering
5. 5 (dramatic re-enactment of hacking into a server)
6. 3 months later... Hack is uncovered on a message forum
8. Food for Thought A look back at Conficker
9. Hackers always leave a trace Tracing & Attribution
11. Assessing impact Legal repercussions
12. 6.5 million accounts
13. 100+ million accounts
14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: • Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD
15. 1. Secure configuration of hardware and software 2. Controlled use of admin privileges Mitigation & CIS Controls
16. 1. Secure configuration of hardware and software 2. Controlled use of admin privileges Mitigation & CIS Controls
18. Food for Thought What do you think of the verdict?
19. Current day Where are they now?
23. Food for Thought Hack or no hack?
24. Read more at: cecy.dev Thank you!