Over 100 million LinkedIn email and password combinations have been leaked to the internet. According to Cory Scott, Chief Information Security Officer at the company, the credentials were taken from a data breach back in 2012. In  a blog post on the company’s website, he wrote, “We are taking immediate steps to invalidate the passwords of the accounts impacted, and we will contact those members to reset their passwords. We have no indication that this is as a result of a new security breach.”

Back in June 2012, the business-oriented social network revealed that hackers had stolen the credentials for over 6 million user accounts. Users of the affected accounts were unable to access their LinkedIn profiles until they reset their passwords. It turns out that the scope of the breach was much larger than 6 million accounts and that the additional 100 million credentials were not accounted for at that time. 

According to Motherboard, a hacker is selling the stolen credentials through an illegal online marketplace for approximately $2000 USD worth of bitcoin. In an effort to secure its users, LinkedIn will invalidate the passwords of the impacted accounts and contact affected members regarding the breach, prompting them to reset their passwords. The company also recommends that all LinkedIn users enable two-factor authentication and use complex passwords to protect themselves going forward.