Carnegie Mellon University Website Home Page
 

SECURITY ALERT: LinkedIn and eHarmony Report Stolen Passwords - Reset Account Password

(US Eastern Time)
DAY: Thursday
DATE: June 7, 2012

WHOM DOES THIS AFFECT?

Individuals using LinkedIn and eHarmony social networking sites

SUMMARY:

LinkedIn, a popular professional networking site, and eHarmony, a popular dating site, confirmed yesterday, June 6, that passwords associated with its  accounts were compromised. LinkedIn and eHarmony are both sending users with compromised account passwords an email with instructions on how to reset their passwords. Computing Services urges you to take the following measures regardless of whether your account was compromised.                

WHAT YOU NEED TO DO:


Be on the lookout for fraudulent emails related to the LinkedIn and eHarmony security breach. Users of the services should go directly to the LinkedIn and eHarmony sites to change their passwords using the instructions provided above. DO NOT respond directly to emails that appear to be from either LinkedIn or eHarmony that ask you to confirm account information.

MORE INFORMATION:

For a sample fraudulent email that was sent to LinkedIn users, visit
http://blog.eset.com/2012/06/06/linkedin-security-woes-and-what-to-do-about-it

Additional information about the LinkedIn security breach is posted on LinkedIn's blog:
http://blog.linkedin.com/2012/06/06/linkedin-member-passwords-compromised/

Information about the eHarmony security breach is posted on eHarmony's blog:
http://advice.eharmony.com/blog/2012/06/06/update-on-compromised-passwords/

There is speculation that these breaches were related. If additional service providers come forward and indicate that they too were affected, Computing Services will send an update.
            

CONTACT:

Please direct any questions or comments to the Computing Services Help Center (412-268-HELP or it-help@cmu.edu) or to your departmental administrator or DSP consultant.