LinkedIn Scraped and Faked Data (2023) Data Breach (2023)
If you are a customer of LinkedIn, here’s what’s now in circulation.
In November 2023, a post to a popular hacking forum alleged that millions of LinkedIn records had been scraped and leaked. On investigation, the data turned out to be a combination of legitimate data scraped from LinkedIn and email addresses constructed from impacted individuals' names.
On November 4, 2023, 19.8 million LinkedIn users learned that their professional details had surfaced in a hacking forum post claiming a massive scrape of the platform. The incident, now tracked as the LinkedIn Scrape 2023, combined real data pulled from public profiles with fabricated email addresses generated from victims’ names. Anyone whose LinkedIn profile contained a name, job title, location, or skill set may have been exposed, even if they never shared an email address on the site.
Reported Details from the Disclosure
The primary listing on Have I Been Pwned states that the dataset contains email addresses, genders, geographic locations, job titles, names, professional skills, and social media profiles. It clarifies that much of the information was obtained through scraping publicly visible LinkedIn profiles, while the associated email addresses were largely constructed rather than stolen directly from LinkedIn’s systems. The disclosure does not indicate that passwords, direct messages, or private account data were taken. The forum post appeared in November 2023, and the breach notification reflects that timeline without specifying an exact date the scraping occurred.
Why This Exposure Matters for You and Your Family
When professional details such as job titles, skills, and locations are paired with even a guessed email address, the information becomes valuable for targeted phishing, impersonation, and recruitment scams. Your family members who maintain LinkedIn profiles—perhaps for side businesses, teaching, or networking—may also be included. A recruiter-style email that references your exact title and a recent skill endorsement feels personal and therefore trustworthy. Over time these small leaks compound: one realistic-looking message can lead to clicking a malicious link or sharing more data than intended.
19.8 million records is large enough that opportunistic attackers will automate searches across the set. If your data appears, it can be resold quietly on lower-profile forums long after the original post fades from view.
The Doxxing and Identity-Chain Risks
Professional profiles are high-quality links in doxxing chains because they reliably connect real names to employers, locations, and other online handles. An attacker who starts with your scraped LinkedIn record can cross-reference the constructed email across breach repositories, social platforms, and people-search sites. Within hours they may assemble a full picture that includes home address, family member names, and children’s usernames. This is exactly how credential leaks cascade into account takeovers on gaming platforms, personal email, and financial services. Even without passwords in this specific dataset, the confirmed names and locations make it easier for follow-on attackers to guess or reset credentials elsewhere.
What to Do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
- Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is flagged within hours rather than months.
- Rotate any password you have ever used on LinkedIn anywhere else it is reused, and switch to 2FA through an authenticator app instead of SMS.
- Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which often chain back to the same names and locations leaked here.
- Let remediation specialists handle ongoing takedown requests for any data-broker listings that surface from this or related exposures.
The incident shows that even data you thought was safely public can be weaponized when combined with constructed personal identifiers. Staying ahead requires more than occasional manual checks. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered handles to your real identity, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children’s gaming accounts that frequently become targets once a name and location are known.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
