Data breach costs LinkedIn up to $1 million

Powered by SC Magazine
 

LinkedIn's 2Q earnings call reveals that the company spent between $500,000 to $1 million on forensic work surrounding a recent data compromise.

LinkedIn announced the recuperation costs of the recent data breach could have topped $1 million.

Cheif financial officer Steve Sordello said the costs included forensic work and “other elements” relating to the breach.

He said the 175-million-member company continued to strengthen its website's security and is expected to add $2 million to $3 million in costs in the current quarter toward those efforts.

“Since [the breach], we have redoubled our efforts to ensure the safety of our member account on LinkedIn by further improving password-strengthening measures and enhancing the security of our infrastructure and data,” chief executive Jeff Weiner said during the second quarter results call.

“The health of our network as measured by number of growth and engagement remains as strong as it was prior to the incident.”

Earlier this year, attackers dumped 6,458,020 encrypted LinkedIn passwords on forum InsidePro seeking assistance in decoding them.

The stolen passwords were encrypted using an outdated SHA-1 hash function created by the National Security Agency.

In addition to this weakness, LinkedIn failed to add additional security layers, such as salting the passwords, a technique which randomly appends a string of characters.

Following the attack, LinkedIn confirmed in a blog post the addition of new security layers, including the salting of passwords.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


 
Readers of this article also read...
 
 
Top Stories
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
Telstra hands over copper, HFC in new $11bn NBN deal
Value of 2011 deal remains intact.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  39%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  7%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1786

Vote
Do you support the abolition of the Office of the Information Commissioner?