You've Been Scraped Data Breach

What happened?

In October and November 2018, security researcher Bob Diachenko identified several unprotected MongoDB instances believed to be hosted by a data aggregator . Containing a total of over 66M records, the owner of the data couldn't be identified but it is believed to have been scraped from LinkedIn hence the title "You've Been Scraped". The exposed records included names, both work and personal email addresses, job titles and links to the individuals' LinkedIn profiles.

When did it happen?

The breach date in the public record is October 5, 2018. The record was added to the catalogue on December 6, 2018 and last updated there on December 6, 2018.

What information was reported as exposed?

• Email addresses
• Employers
• Geographic locations
• Job titles
• Names
• Social media profiles

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with You've Been Scraped around October 5, 2018. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.