LinkedIn (scraped & faked, 2023) 2023.0 Data Breach

LinkedIn Scraped & Synthetic Profile Corpus (2023): Millions of Professional Records Mixed with Fabricated Data Exposed on Hacking Forum | ObscureIQ
ObscureIQ Breach Intelligence

Classification Tags

USDoDScraping / CollectionSocialEmail AddressFull NameGenderGeographic LocationJob InformationProfessional ProfileSocial Media Profile
Low SeverityWebsite / service breach

LinkedIn Scraped & Synthetic Profile Corpus (2023): Millions of Professional Records Mixed with Fabricated Data Exposed on Hacking Forum

Synthetic or scraped profile corpus

Verified by ObscureIQ Intelligence
14/100Breach Risk Index
6Data Value
10Market Recency
974dSince Breach

Breach Intelligence Summary

Entity: LinkedIn (scraped & faked, 2023) · Actor: USDoD (posted) · Sources: 9 references
Attack: Scraping / Collection
Profile: Synthetic / Scraped Dataset · Scraped profile data and fabricated contact fields · Scraped-and-faked profile corpus · Global
Timeline: Breach (2012-05-05) · Indexed (Nov 07, 2023) · Year (2023.0)
Exposure: Undisclosed records · 7 fields: Email Address, Full Name, Gender, Geographic Location, Job Information, Professional Profile, Social Media Profile
Status: Scrape

Executive Summary

In November 2023, a hacking-forum user ("USDoD") posted a dataset alleged to contain millions of LinkedIn records. On analysis it was a mix of data scraped from public LinkedIn profiles and email addresses fabricated from individuals names, totaling about 19.8 million records. HIBP loaded it flagged as a spam list because of the large share of fabricated email addresses. It is scraped/synthetic data, not a breach of LinkedIn systems.

ObscureIQ assessment: Risk is high because scraped-and-faked datasets are built for targeting. Even when some fields are fabricated, the corpus can still support phishing, impersonation, lead enrichment, stalking, and fraud by linking real people to plausible professional and contact data at scale.

Breach Impact

Value to attackers is limited by the fabricated addresses, but the genuine scraped profile data supports spear-phishing and profile enrichment. This is distinct from the 2021 LinkedIn scrape (700M).

About LinkedIn (scraped & faked, 2023)

Synthetic or scraped profile corpus

Why They Hold Your Data

Synthetic or scraped profile corpus combining harvested professional-profile information with fabricated or enriched contact fields. The likely data context includes public-profile attributes, inferred employment signals, and appended or falsified contact details that were packaged as a usable people dataset.

Data Points Exposed

7 verified field types
Email Address
Full Name High
Gender
Geographic Location
Job Information
Professional Profile
Social Media Profile

Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.

Exploitation & Downstream Threats

Threat Activity:Low
Primary downstream threats:
Threat vectors:
  • Phishing, credential stuffing & account takeover
  • Name-based social engineering
  • Profile enrichment
  • Pattern-of-life analysis & physical surveillance
  • Vishing & authority impersonation
  • Targeted job scam lures
  • Account impersonation & social graph harvesting

Threat Actor: USDoD (posted)

USDoD (posted)
Scraping / Collection

Attribution and method are based on available breach intelligence. Reported attack vector: Scraping / Collection.

Recommended Actions

If you believe your information may be included:

Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.

Frequently Asked Questions

What happened in the LinkedIn (scraped & faked, 2023) breach?

In November 2023, a hacking-forum user ("USDoD") posted a dataset alleged to contain millions of LinkedIn records. On analysis it was a mix of data scraped from public LinkedIn profiles and email addresses fabricated from individuals names, totaling about 19.8 million records. HIBP loaded it…

What data was exposed?

Verified fields include Email Address, Full Name, Gender, Geographic Location, Job Information, Professional Profile, Social Media Profile.

What should I do if I was affected?

Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.

Sources & References

Every claim on this page is traceable. This breach draws on:

Breach Index
Have I Been Pwned
Record & field corroboration
Cross-source
9ghz
Independent catalogue listing
Cross-source
BreachAware
Independent catalogue listing
Cross-source
BreachForums_Official_Index
Independent catalogue listing
Cross-source
DataViper.io
Independent catalogue listing
Cross-source
Dehashed
Independent catalogue listing
Cross-source
Hashes.org
Independent catalogue listing
Cross-source
Siphon
Independent catalogue listing
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Risk Index scoring & downstream-threat assessment

Protect Yourself

Check If You're Affected

Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.

Get Free Breach Alerts

Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.

High-Risk? Get an Exposure Audit

Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.

Request Consultation