A new investigation has sparked serious privacy concerns about how LinkedIn handles user data. A group called Fairlinked e.V. claims the platform may have quietly collected sensitive information from as many as 405 million users without clearly informing them. The group describes the issue as part of one of the “largest corporate espionage and data breach scandals in digital history.” What the investigation claims According to the report, LinkedIn placed special code on its website that scans users’ browsers for installed software and extensions. This code reportedly: The report claims this process happens without clear user consent and is not mentioned in LinkedIn’s privacy policy. Investigators also allege the data may be shared with third parties, including cybersecurity firm HUMAN Security. Why this raises privacy concerns Unlike many social platforms, LinkedIn profiles usually contain real identities, job titles, and employer details. That makes any extra data collection more sensitive. The investigation says LinkedIn scanned over 6,000 browser extensions, some of which could reveal deeply personal information such as: The report even claims LinkedIn detected 509 job-search-related extensions, potentially exposing users looking for new roles while their employers could still view their profiles. Under the EU’s General Data Protection Regulation (GDPR), collecting such sensitive data usually requires clear permission from users. Tracking competing software too? The investigation also alleges LinkedIn checked for tools used by businesses, including: In total, more than 200 competing services may have been detected, including Apollo, Lusha, and ZoomInfo. Critics say this could allow LinkedIn to understand which companies rely on rival platforms. Links to a cybersecurity firm The report claims some collected data was shared with HUMAN Security, which merged in 2022 with PerimeterX. PerimeterX was founded by former members of Unit 8200, a cyber-intelligence division of the Israeli Defense Forces. HUMAN Security reportedly generates about $100 million annually. LinkedIn strongly denies the allegations LinkedIn has rejected the claims and called them inaccurate. According to the company, the accusations came from an individual whose account was restricted for violating platform rules through scraping activities. LinkedIn says its systems only detect extensions to: The company also stressed that it does not use this data to identify sensitive personal details about users.
