Upgrade to Pro — share decks privately, control downloads, hide ads and more …

LinkedIn Data Breach 2012 Case Study

Avatar for Cecy C. Cecy C.
November 30, 2021
Technology
0
5.1k

LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021

Avatar for Cecy C.

Cecy C.

November 30, 2021
Tweet

More Decks by Cecy C.

See All by Cecy C.
Surviving Code Reviews & Tech Interviews
Avatar for Cecy C. cecyc
0
96
Vulnerability True: Surviving Brutal Code Reviews and Tech Interviews
Avatar for Cecy C. cecyc
0
160
The Joy of CSS: RailsConf 2019
Avatar for Cecy C. cecyc
0
170
RubyConf 2018 Psychology of Fake News
Avatar for Cecy C. cecyc
0
90
A Retro of Retros: How Sprint Retrospectives Can Be Both Fun and Productive
Avatar for Cecy C. cecyc
0
170
MONKTOBERFEST 2018: Psychology of Fake News
Avatar for Cecy C. cecyc
0
110
From Monolith to Microservice: Building APIs with gRPC & golang
Avatar for Cecy C. cecyc
3
1.8k
Building APIs with GRPC, PHP, and Golang
Avatar for Cecy C. cecyc
1
580
The Psychology of Fake News (And What Tech Can Do About It)
Avatar for Cecy C. cecyc
1
62

Other Decks in Technology

See All in Technology
コンパウンド組織のCRE #cre_meetup
Avatar for LayerX layerx
PRO
1
270
serverless team topology
Avatar for kensh _kensh
3
230
20251027_マルチエージェントとは
Avatar for Almondoイベント担当 almondo_event
1
450
Zero Trust DNS でより安全なインターネット アクセス
Avatar for Murachi Akira murachiakira
0
100
AI時代、“平均値”ではいられない
Avatar for uhyo uhyo
8
2.6k
スタートアップの現場で実践しているテストマネジメント #jasst_kyushu
Avatar for Makky makky_tyuyan
0
130
QA業務を変える（！？）AIを併用した不具合分析の実践
Avatar for ma2ri__ ma2ri
0
150
Open Table Format (OTF) が必要になった背景とその機能 (2025.10.28)
Avatar for Akira Shimosako simosako
2
330
AIでデータ活用を加速させる取り組み / Leveraging AI to accelerate data utilization
Avatar for okiyuki okiyuki99
1
630
From Natural Language to K8s Operations: The MCP Architecture and Practice of kubectl-ai
Avatar for Bo-Yi Wu appleboy
0
240
OTEPsで知るOpenTelemetryの未来 / Observability Conference Tokyo 2025
Avatar for Arthur arthur1
0
260
Azure Well-Architected Framework入門
Avatar for tomokusaba tomokusaba
1
130

Featured

See All Featured
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
36
6.1k
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
303
21k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
21
1.2k
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.1k
The Art of Delivering Value - GDevCon NA Keynote
Avatar for David Neal reverentgeek
16
1.7k
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
697
190k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
57
6.6k
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
6.7k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
52
3.5k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
667
130k
KATA
Avatar for Megan Lloyd mclloyd
PRO
32
15k
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
Avatar for Tammy Everts tammyeverts
10
620

Transcript

  1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA

    BREACH CASE STUDY

  2. 1. The Hack How it happened Tracing & attribution 2.

    Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda

  3. Using LinkedIn to Hack LinkedIn A little social engineering

  4. 4

  5. 5 (dramatic re-enactment of hacking into a server)

  6. 3 months later... Hack is uncovered on a message forum

  7. 7

  8. Food for Thought A look back at Conficker

  9. Hackers always leave a trace Tracing & Attribution

  10. None

  11. Assessing impact Legal repercussions

  12. 6.5 million accounts

  13. 100+ million accounts

  14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: •

    Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD

  15. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  16. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  17. 17

  18. Food for Thought What do you think of the verdict?

  19. Current day Where are they now?

  20. 20

  21. 21

  22. 22

  23. Food for Thought Hack or no hack?

  24. Read more at: cecy.dev Thank you!