LinkedIn Goes After Email

LinkedIn has sent a cease-and-desist letter to the makers of Sell Hack, a JavaScript-based browser plug-in that scrapes email addresses associated with social media profiles from the web and markets that data to sales professionals.

Not only is a LinkedIn member's data at risk, but also that of their contacts and connections as well.

According to the Sell Hack website, once the browser extension is installed and a user browses to a social media profile page, a 'Hack In' button is visible that will search the web for email addresses that could be associated with a particular profile.

According to the Sell Hack blog: 'The magic happens when you click the 'Hack In' button. You'll notice the page slides down and our system starts checking publicly available data sources to return a confirmation of the person's email address, or our best guesses.'

LinkedIn's legal team reached out to Sell Hack with its cease-and-desist last night.

'We are doing everything we can to shut Sell Hack down,' said a LinkedIn spokesperson. 'Yesterday LinkedIn's legal team delivered Sell Hack a cease and desist letter as a result of several violations. LinkedIn members who downloaded Sell Hack should uninstall it immediately and contact Sell Hack requesting that their data be deleted.'

While the issue may not be a security vulnerability, since the Snowden leaks began, technology providers are ultra-sensitive about maintaining the privacy of their users' data, which in this case is being collected and sold without consent.

'We advise LinkedIn members to protect themselves and to use caution before downloading any third-party extension or app,' LinkedIn said. 'Often times, as with the Sell Hack case, extensions can upload your private LinkedIn information without your explicit consent.'

LinkedIn is one of a handful of major technology providers who lobbied hard against the government for additional transparency in reporting government requests for user data. Many of those same companies were initially accused of providing the government direct access to servers in order to obtain user data.

Unlike other providers such as Google or Facebook, LinkedIn does not offer Web-based email or storage. Instead, its appeal to the intelligence community was its mapping of connections between its hundreds of millions of members.

LinkedIn called the transparency ban unconstitutional in September; the technology companies eventually won out in January when the Justice Department agreed to ease a gag order that prevented the companies from reporting on national-security-related data requests.