LinkedIn Data Scrape: What Was Exposed and What to Do
LinkedIn said the 2021 dataset was not a data breach, because the information was scraped. For your risk, the difference matters less than you might think.
By Siddharth ShankarUpdated October 20, 2026In June 2021 a seller advertised data on about 700 million LinkedIn users, containing emails, names, phone numbers, addresses, geolocation, usernames, profile URLs, work history and genders. Credentials and banking details appeared not to be included. LinkedIn said, “This was not a LinkedIn data breach,” and that the data was scraped and combined with other sources. Scraping breaks its terms. Expect more phishing and SMS scams, and review your profile visibility.
Your email may already be in a known data breach. Find out in about 30 seconds.
Free · About 30 seconds · No sign-up · Email not stored
LinkedIn holds professional details that scammers love: your job, your employer and your contacts. In 2021, two large datasets raised concern. This guide follows Malwarebytes’ report from June 2021.
What was offered
A seller showed a sample of data that was said to cover about 700 million records. The data was reported to include:
- Email addresses and full names
- Phone numbers
- Physical addresses and geolocation records
- Usernames and profile URLs
- Work history
- Genders
Credentials and banking details appear not to be included, according to the report.
Scraped is not the same as breached
LinkedIn said, “This was not a LinkedIn data breach,” and explained that the data came from scraping and was combined with information from other sources. It added that scraping violates its terms of service. A scrape collects information that is visible to a visitor or accessible through the site, rather than breaking into a database.
Do not guess. See which breaches include your email and what leaked.
Free · About 30 seconds · No sign-up · Email not stored
Earlier incidents
The report says an incident in April 2021 used a similar method. LinkedIn also had a genuine breach in 2012 that exposed over 100 million passwords, which is a separate matter.
Why it still matters to you
Scraped data can be as useful to a scammer as stolen data. A name, a workplace, a phone number and an address are the raw material for convincing fake recruiter messages, invoice fraud and SMS scams. Combined with other leaks, it builds a profile. See what open-source research can find about you.
What to do
1Turn on two-factor authentication
Protect your LinkedIn account and your email with an authenticator app.
2Check your email
Use our free email check or Have I Been Pwned to see if your address appears in known leaks.
3Review your profile visibility
Check who can see your email, phone number, connections and profile details. See LinkedIn privacy settings: what strangers can see.
4Remove contact details you do not need
An email address or phone number on a public profile can be scraped again.
5Watch for scams
Treat unexpected job offers, document requests and urgent payment messages with suspicion. See phishing and smishing statistics.
How scammers use professional data
Professional profiles let a scammer write a message that fits your career. A fake recruiter can quote your current job title. A fake supplier can mention your employer. A fake colleague can use a real manager’s name. Because the details are accurate, the message passes the first test most people apply, which is whether it seems to know who they are.
Signs of a LinkedIn-themed scam
- A job offer you did not apply for, with unusually high pay and little detail.
- A request to move the chat to a private messaging app quickly.
- A request for identity documents, bank details or an upfront fee before any interview.
- A link that asks you to sign in to LinkedIn again to view a document.
- A message that creates urgency, such as a deadline to reply or accept.
Limiting what can be scraped
You cannot stop every scraper, but you can limit what is available. Keep your email address and phone number off the public view of your profile, and reduce your headline and location to what is useful for work. Review connection visibility, and think twice before accepting requests from people you do not know. Each of these steps lowers what a future scrape can collect.
Compare with the Twitter leak
The same pattern of linking emails to public profiles appears in the Twitter 200 million data leak.
Details may have changed since 2021, so check LinkedIn’s current privacy settings for what is public.
Sources
- Malwarebytes: Second colossal LinkedIn breach in 3 months (about 700 million records, data fields, LinkedIn statement, April incident, 2012 breach, advice)
Frequently asked questions
Was LinkedIn hacked in 2021?
LinkedIn said, “This was not a LinkedIn data breach.” It said the data was scraped and combined with other sources.
How many users were in the data?
A seller advertised about 700 million records.
What data was included?
Emails, names, phone numbers, physical addresses and geolocation, usernames, profile URLs, work history and genders.
Were passwords exposed?
The report says credentials and banking details appear not to be included.
What should I do?
Turn on two-factor authentication, check your email in breach tools, review profile visibility and watch for scams.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Change reused and leaked passwords
NordPass flags weak and reused passwords, and its Premium plan alerts you if your details appear in new breaches.
See NordPass →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.