Lynda.com database breached

[Bouzoo]

The main source for this one is an email that I woke up to this morning. Mind you, the breach is supposed to be a small one, less than 55.000 (confirmed?) users according to LinkedIn, shich own Lynda.com in case you missed it:

 

Quote

We recently became aware that an unauthorized third party ?accessed a database that included Lynda.com ?user data. As a precautionary measure, we reset passwords for the less than 55,000 Lynda.com users affected and are notifying them of the issue. We’re also working to notify approximately 9.5 million Lynda.com users who had learner data, but no password information, in the database. We have no evidence that any of this data has been made publicly available and we have taken additional steps to secure Lynda.com accounts.

 

 

The mentioned emaiI I got this morning:

 

According to email, they don't have evidence if your account may has been accessed, so those <55.000 might be the ones they are aware off.

Doesn't sound to be a serious breach by any means, but still thumbs up for sending email immediately.

 

Figured I might post this here, considering how huge of a sponsor Lynda.com has been to LMG.

 

 

[dizmo]

I wish Lynda was cheaper. I'd totally pay $10/month. $30 a month ($40 in CDN) is a little steep.

So many breeches lately.

[Monkey Dust]

Is there any large company left who hasn't been breached? Isn't it about time people started taking this more seriously?

[DELTAprime]

Lynda's parent company Linkedin is in the middle of being acquired by Microsoft. I wonder if Microsoft can get Linkedin for cheaper now like Verizon is trying to get Yahoo cheaper cause of their first breach.

[Battlefan1942]

Your profile picture says everything

[Sir Asvald]

I bet someone learnt how to hack on their site and hacked them.

 

 

/s

[Bensemus]

Oops I read that as linkedin and was confused about people talking about courses.

[DELTAprime]

I know Lynda haven't bought any WAN show spots in a while but this coming week would be a hilarious time for them to have a spot.

[Prysin]

2 hours ago, dizmo said:

I wish Lynda was cheaper. I'd totally pay $10/month. $30 a month ($40 in CDN) is a little steep.

So many breeches lately.

it's easy to breach, when the walls are made of wood....

[Tech_Dreamer]

ayo lynda,  get the monster truck, we goin huntin'

[Sauron]

If you have a Lynda account change your password just to be sure.

[captain_to_fire]

So does it mean no more Lynda.com spots in any succeeding Techquickie episodes?

[MrDynamicMan]

6 minutes ago, hey_yo_ said:

So does it mean no more Lynda.com spots in any succeeding Techquickie episodes?

Please tell me they had one in the cubersecurity episode 

[captain_to_fire]

6 minutes ago, MrDynamicMan said:

Please tell me they had one in the cubersecurity episode 

Yup, lynda.com had a spot in the episode about Ransomware 

 

[zMeul]

maybe lynda should take one of their curses in on-line security 

[Tataffe]

I don't like it when services reset passwords. A good password is safer than exposing users to a possible man-in-the-middle attack. Let me take care of that myself if I feel the need to ...

[VerticalDiscussions]

Lynda.com, seems to be running out of ideas too.

[sazrocks]

It doesn't matter if they got the passwords, as they were surely salted and hashed... right?

[Bouzoo]

9 hours ago, zMeul said:

maybe lynda should take one of their curses in on-line security 

They don't say what type of security they have, but there is no such thing as ultimate security. If they can breach multi billion dollar companies security, what is one Lynda.com? 

[Centurius]

6 hours ago, sazrocks said:

It doesn't matter if they got the passwords, as they were surely salted and hashed... right?

Almost definitely were but companies recommend changing passwords regardless in the very slim chance that the hackers somehow manage to decrypt them.

[ionbasa]

Didn't get an email. Does anyone know if this affects organizations that use Shibboleth or (CAS)Central Authentication Services for logins?

[TidaLWaveZ]

Russians. Did anyone say Russians yet?

[Ashaira]

I made a trial account last month to watch a series of tutorials on something i needed for work. Didn't end up helping at all so i dropped it. Next week i find out someone charged my account with a premium account service and saw someone had been watching hacking and networking videos from some 3rd world asian country. Fortunately they were fast to respond and give my money back but i can't say i'm happy that they auto charge when trial ends, they store credit or paypal info on the account itself and you can't remove payment info unless you contact support.

[paradigm249]

Damnit Lynda, they shouldnt have visited Lynda.com and tried to learn from the experts

 

[Bleedingyamato]

11 hours ago, Centurius said:

Almost definitely were but companies recommend changing passwords regardless in the very slim chance that the hackers somehow manage to decrypt them.

What does salted and hashed mean?    I saw that mentioned when I was looking up details about a 2013 breach that happened to Adobe for a class assignment in a survey of info security grad school class I just finished.