Reddit resets 100,000 passwords in wake of LinkedIn hack

Microsoft bans simple passwords as LinkedIn looks out for suspicious account activity

Reddit has reset 100,000 passwords after hackers stole people's credentials from other sites to take over their accounts.

The social network alerted its user base yesterday to the fact it had sent out the reset notices over the past fortnight, following hacks on sites such as LinkedIn, which spilled 117 million people's account details back in 2012, which a hacker decided to sell for 1,500 this month.

Advertisement - Article continues below

"With this access to likely username and password combinations, we've noticed a general uptick in account takeovers (ATOs) by malicious (or at best spammy) third parties," a post by Reddit read.

Explaining that Reddit has not been hacked, the firm said the rise in account takeovers was down to people re-using the same passwords on multiple sites, meaning hackers with their LinkedIn credentials could use the same details to log into their Reddit accounts.

"We've ramped up our ability to detect the takeovers, and sent out 100k password resets in the last 2 weeks," Reddit added. "More are to come as we continue to verify and validate that no one except for you is using your account."

It advised people to use "strong, unique" passwords, setting and verifying email addresses for their account, and checking their account activity for unusual goings-on.

Advertisement - Article continues below

LinkedIn suffered the data breach in 2012, but only realised earlier this month that hackers were selling the data online it said people's accounts still at risk were those who had not changed the password in the aftermath of the cyber attack.

Advertisement - Article continues below

In an email to its 400 million members sent this week, LinkedIn explained other measures it has taken to mitigate the breach.

It said: "We invalidated passwords of all LinkedIn accounts created prior to the 2012 breach that had not reset their passwords since that breach.

"In addition, we are using automated tools to attempt to identify and block any suspicious activity that might occur on LinkedIn accounts. We are also actively engaging with law enforcement authorities."

The consequences of the LinkedIn hack led Microsoft to pledge to ban simple, overused passwords in order to improve security.

In a blog post, Microsoft's identity division director, Alex Simons explained his team analysed common passwords so Microsoft users are blocked from picking them.

Various missions are underway to improve security, such as Google and Yahoo both trying to replace passwords with other methods for people to identify themselves.

Featured Resources

Successful digital transformations are future ready - now

Research findings identify key ingredients to complete your transformation journey

Download now

Cyber security for accountants

3 ways to protect yourself and your clients online

Download now

The future of database administrators in the era of the autonomous database

Autonomous databases are here. So who needs database administrators anymore?

Download now

The IT expert’s guide to AI and content management

Your guide to the biggest opportunities for IT teams when it comes to AI and content management

Download now


cyber security

Zoom hires ex-Facebook CSO Alex Stamos to boost platform security

8 Apr 2020

HP Support Assistant flaws leave Windows devices open to attack

6 Apr 2020
cyber security

Safari bug let hackers access cameras on iPhones and Macs

6 Apr 2020
video conferencing

Zoom CEO admits company "moved too fast" as privacy issues mount

6 Apr 2020

Most Popular

Mobile Phones

Microsoft patents a mobile device with a third screen

6 Apr 2020
cyber security

Microsoft gobbles up domain to keep it from hackers

8 Apr 2020

A critical flaw in 350,000 Microsoft Exchange remains unpatched

7 Apr 2020