Reddit resets 100,000 passwords in wake of LinkedIn hack

Microsoft bans simple passwords as LinkedIn looks out for suspicious account activity

Reddit has reset 100,000 passwords after hackers stole people's credentials from other sites to take over their accounts.

The social network alerted its user base yesterday to the fact it had sent out the reset notices over the past fortnight, following hacks on sites such as LinkedIn, which spilled 117 million people's account details back in 2012, which a hacker decided to sell for 1,500 this month.

"With this access to likely username and password combinations, we've noticed a general uptick in account takeovers (ATOs) by malicious (or at best spammy) third parties," a post by Reddit read.

Explaining that Reddit has not been hacked, the firm said the rise in account takeovers was down to people re-using the same passwords on multiple sites, meaning hackers with their LinkedIn credentials could use the same details to log into their Reddit accounts.

Advertisement - Article continues below
Advertisement - Article continues below

"We've ramped up our ability to detect the takeovers, and sent out 100k password resets in the last 2 weeks," Reddit added. "More are to come as we continue to verify and validate that no one except for you is using your account."

It advised people to use "strong, unique" passwords, setting and verifying email addresses for their account, and checking their account activity for unusual goings-on.

LinkedIn suffered the data breach in 2012, but only realised earlier this month that hackers were selling the data online it said people's accounts still at risk were those who had not changed the password in the aftermath of the cyber attack.

In an email to its 400 million members sent this week, LinkedIn explained other measures it has taken to mitigate the breach.

It said: "We invalidated passwords of all LinkedIn accounts created prior to the 2012 breach that had not reset their passwords since that breach.

"In addition, we are using automated tools to attempt to identify and block any suspicious activity that might occur on LinkedIn accounts. We are also actively engaging with law enforcement authorities."

Advertisement - Article continues below

The consequences of the LinkedIn hack led Microsoft to pledge to ban simple, overused passwords in order to improve security.

In a blog post, Microsoft's identity division director, Alex Simons explained his team analysed common passwords so Microsoft users are blocked from picking them.

Various missions are underway to improve security, such as Google and Yahoo both trying to replace passwords with other methods for people to identify themselves.

Featured Resources

Digitally perfecting the supply chain

How new technologies are being leveraged to transform the manufacturing supply chain

Download now

Three keys to maximise application migration and modernisation success

Harness the benefits that modernised applications can offer

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

The 3 approaches of Breach and Attack Simulation technologies

A guide to the nuances of BAS, helping you stay one step ahead of cyber criminals

Download now


internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Popular password managers found to have serious flaws

21 Feb 2019

Most Popular

operating systems

17 Windows 10 problems - and how to fix them

13 Jan 2020

Windows 10 and the tools for agile working

20 Jan 2020
Microsoft Windows

What to do if you're still running Windows 7

14 Jan 2020
public sector

UK gov launches £300,000 SEN EdTech initiative

22 Jan 2020