Ask HN: Does LinkedIn have to notify me of breach?

1 pointsIaks9y ago1 comments

My email and sha1'd password were leaked in LinkedIn's 2012 breach. They've, up til now, made no attempt to contact me. There seem to be CA state statutes requiring notification for this type of breach.

Has anyone else received notification?

Do they get a pass, legally, because unsalted sha1 actually counts as encryption?

I deleted my account at LinkedIn shortly after this event originally occurred. I only wish I had done it sooner...

1 comments

edwcar139y ago

Yep. I got the email. Double check that your emails are in line with your linkedin account.

j / k navigate · click thread line to collapse