Upgrade to PRO for Only $50/Year—Limited-Time Offer! 🔥

LinkedIn Data Breach 2012 Case Study

Avatar for Cecy C. Cecy C.
November 30, 2021
Technology
0
5.1k

LinkedIn Data Breach 2012 Case Study

Case Study presented for Beyond the Code: Cybersecurity in Context, UC Berkeley, MICS Fall 2021

Avatar for Cecy C.

Cecy C.

November 30, 2021
Tweet

More Decks by Cecy C.

See All by Cecy C.
Surviving Code Reviews & Tech Interviews
Avatar for Cecy C. cecyc
0
100
Vulnerability True: Surviving Brutal Code Reviews and Tech Interviews
Avatar for Cecy C. cecyc
0
160
The Joy of CSS: RailsConf 2019
Avatar for Cecy C. cecyc
0
170
RubyConf 2018 Psychology of Fake News
Avatar for Cecy C. cecyc
0
93
A Retro of Retros: How Sprint Retrospectives Can Be Both Fun and Productive
Avatar for Cecy C. cecyc
0
170
MONKTOBERFEST 2018: Psychology of Fake News
Avatar for Cecy C. cecyc
0
110
From Monolith to Microservice: Building APIs with gRPC & golang
Avatar for Cecy C. cecyc
3
1.8k
Building APIs with GRPC, PHP, and Golang
Avatar for Cecy C. cecyc
1
590
The Psychology of Fake News (And What Tech Can Do About It)
Avatar for Cecy C. cecyc
1
64

Other Decks in Technology

See All in Technology
AI駆動開発の実践とその未来
Avatar for Ikko Eltociear Ashimine eltociear
0
130
RAG/Agent開発のアップデートまとめ
Avatar for sakai taka0709
0
190
Oracle Cloud Infrastructure IaaS 新機能アップデート 2025/09 - 2025/11
Avatar for oracle4engineer oracle4engineer
PRO
0
160
品質のための共通認識
Avatar for KAKEHASHI kakehashi
PRO
3
270
マイクロサービスへの5年間 ぶっちゃけ何をしてどうなったか
Avatar for Tomohiro Hashidate joker1007
14
6.3k
「図面」から「法則」へ 〜メタ視点で読み解く現代のソフトウェアアーキテクチャ〜
Avatar for Satoshi Kobayashi scova0731
0
320
MySQLとPostgreSQLのコレーション / Collation of MySQL and PostgreSQL
Avatar for とみたまさひろ tmtms
1
260
AI駆動開発における設計思想 認知負荷を下げるフロントエンドアーキテクチャ/ 20251211 Teppei Hanai
Avatar for SHIFT EVOLVE shift_evolve
PRO
2
420
AWSを使う上で最低限知っておきたいセキュリティ研修を社内で実施した話 ~みんなでやるセキュリティ~
Avatar for maimyyym maimyyym
2
1.7k
re:Invent 2025 ふりかえり 生成AI版
Avatar for TakaakiKakei takaakikakei
1
220
LLM-Readyなデータ基盤を高速に構築するためのアジャイルデータモデリングの実例
Avatar for Kashira kashira
0
260
mairuでつくるクレデンシャルレス開発環境 / Credential-less development environment using Mailru
Avatar for Issei Naruta mirakui
5
540

Featured

See All Featured
Faster Mobile Websites
Avatar for Dean Hume deanohume
310
31k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
463
34k
Save Time (by Creating Custom Rails Generators)
Avatar for Garrett Dimon garrettdimon
PRO
32
1.8k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
73
11k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
35
3.3k
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
1.4k
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
5
800
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.2k
How to Ace a Technical Interview
Avatar for Jacob Kaplan-Moss jacobian
281
24k
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
85
9.3k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
57
6.7k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
132
19k

Transcript

  1. Cecy Correa // UC Berkeley MICS 2021 LINKEDIN 2012 DATA

    BREACH CASE STUDY

  2. 1. The Hack How it happened Tracing & attribution 2.

    Impact LinkedIn class action suit United States v. Nikulin 3. Current day Agenda

  3. Using LinkedIn to Hack LinkedIn A little social engineering

  4. 4

  5. 5 (dramatic re-enactment of hacking into a server)

  6. 3 months later... Hack is uncovered on a message forum

  7. 7

  8. Food for Thought A look back at Conficker

  9. Hackers always leave a trace Tracing & Attribution

  10. None

  11. Assessing impact Legal repercussions

  12. 6.5 million accounts

  13. 100+ million accounts

  14. LinkedIn Class Action Lawsuit Lawsuit cites LinkedIn’s inability to: •

    Use strong encryption • Salt their passwords LinkedIn settles for over 1 million USD

  15. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  16. 1. Secure configuration of hardware and software 2. Controlled use

    of admin privileges Mitigation & CIS Controls

  17. 17

  18. Food for Thought What do you think of the verdict?

  19. Current day Where are they now?

  20. 20

  21. 21

  22. 22

  23. Food for Thought Hack or no hack?

  24. Read more at: cecy.dev Thank you!