Reddit resets 100,000 passwords in wake of LinkedIn hack

Microsoft bans simple passwords as LinkedIn looks out for suspicious account activity

Reddit has reset 100,000 passwords after hackers stole people's credentials from other sites to take over their accounts.

The social network alerted its user base yesterday to the fact it had sent out the reset notices over the past fortnight, following hacks on sites such as LinkedIn, which spilled 117 million people's account details back in 2012, which a hacker decided to sell for 1,500 this month.

"With this access to likely username and password combinations, we've noticed a general uptick in account takeovers (ATOs) by malicious (or at best spammy) third parties," a post by Reddit read.

Explaining that Reddit has not been hacked, the firm said the rise in account takeovers was down to people re-using the same passwords on multiple sites, meaning hackers with their LinkedIn credentials could use the same details to log into their Reddit accounts.

Advertisement - Article continues below

"We've ramped up our ability to detect the takeovers, and sent out 100k password resets in the last 2 weeks," Reddit added. "More are to come as we continue to verify and validate that no one except for you is using your account."

It advised people to use "strong, unique" passwords, setting and verifying email addresses for their account, and checking their account activity for unusual goings-on.

LinkedIn suffered the data breach in 2012, but only realised earlier this month that hackers were selling the data online it said people's accounts still at risk were those who had not changed the password in the aftermath of the cyber attack.

In an email to its 400 million members sent this week, LinkedIn explained other measures it has taken to mitigate the breach.

It said: "We invalidated passwords of all LinkedIn accounts created prior to the 2012 breach that had not reset their passwords since that breach.

"In addition, we are using automated tools to attempt to identify and block any suspicious activity that might occur on LinkedIn accounts. We are also actively engaging with law enforcement authorities."

The consequences of the LinkedIn hack led Microsoft to pledge to ban simple, overused passwords in order to improve security.

In a blog post, Microsoft's identity division director, Alex Simons explained his team analysed common passwords so Microsoft users are blocked from picking them.

Various missions are underway to improve security, such as Google and Yahoo both trying to replace passwords with other methods for people to identify themselves.

Featured Resources

The IT Pro guide to Windows 10 migration

Everything you need to know for a successful transition

Download now

Managing security risk and compliance in a challenging landscape

How key technology partners grow with your organisation

Download now

Software-defined storage for dummies

Control storage costs, eliminate storage bottlenecks and solve storage management challenges

Download now

6 best practices for escaping ransomware

A complete guide to tackling ransomware attacks

Download now



Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Popular password managers found to have serious flaws

21 Feb 2019

Most Popular

Microsoft Windows

This exploit could give users free Windows 7 updates beyond 2020

9 Dec 2019
Business strategy

Ex-Apple CPU architect accuses the firm of invading privacy

10 Dec 2019

Patch issued for critical Windows bug

11 Dec 2019
Microsoft Azure

Microsoft, not Amazon, is going to win the cloud wars

30 Nov 2019