Skip to main content

News: LinkedIn Autfofill Plugin Flaw Allowed Hackers To Steal Users Personal Information

Martin Jartelius
An AutoFill plugin offered to LinkedIn members was affected by a bug that could have allowed an attacker to steal users’ personal data without them knowing. LinkedIn has long offered an AutoFill button plugin for paying marketing solutions customers, who can add the button to their websites to let LinkedIn users fill in profile data with a single click. Unfortunately, little did uses know that they were exposing sensitive information like email addresses, telephone numbers and job details.

Ahead of the compliance deadline for the EU General Data Protection Regulation (GDPR) and the new Data Protection Act, which implements the regulation in UK law, security experts have shared their top tips on what organisations should be focusing on at the start of a new data protection era.

“Understand that if something happens, transparency and clear communications to affected users is key to avoiding fines as well as staying on the right side of the law – transparency will be key to avoiding disaster. Once those are in place, you can work to catch up and get back on track with the rest of your implementation,” Martin Jartelius said.

See full article below:

 computer weekly logoSecurity experts weigh in on GDPR checklists

Looking for anything in particular?

Type your search word here