LinkedIn denies harvesting user e-mail accounts without permission

Trade

23 September 2013

LinkedIn denied over the weekend charges that the company breaks into the email accounts of its members without permission to harvest contacts’ addresses.

A class action complaint by four users has charged the professional networking site with hacking into their external e-mail accounts and downloading addresses of their contacts for monetary gain by repeatedly promoting its services to these contacts.

Paul Perkins, Pennie Sempell, Ann Brandwein, and Erin Eggers charged LinkedIn with breaking into "its users’ third party e-mail accounts, downloading e-mail addresses that appear in the account, and then sending out multiple reminder e-mails ostensibly on behalf of the user advertising LinkedIn to non-members".

The so-called hacking of the user’s e-mail account and download of addresses is done without "clearly notifying the user or obtaining his or her consent," which is likely to emerge as the crux of the case.

 

advertisement



 

LinkedIn does not access a user’s e-mail account without the user’s permission, and claims that it hacks or breaks into members’ accounts are false, Blake Lawit, senior director of litigation at LinkedIn wrote in a blog post on Saturday. LinkedIn never deceives by "pretending to be you" in order to access the user’s e-mail account, Lawit wrote.

"We never send messages or invitations to join LinkedIn on your behalf to anyone unless you have given us permission to do so," he added.

New users signing in to LinkedIn are asked for the external e-mail address as their user name, though they aren’t told what it will be used for, according to the complaint filed last week in US District Court for the Northern District of California.

If a LinkedIn user leaves an external email account open, LinkedIn is said to pretend to be that user and downloads the e-mail addresses in that account to LinkedIn servers, according to the complaint. Linkedln is able to download the addresses without requesting the password for the external e-mail accounts or obtaining users’ consent, according to the complaint.

If the LinkedIn user has logged out from his e-mail applications, the network requests the user name and password of an external e-mail account to ostensibly verify the identity of the user, and then, without notice or consent, attempts to access the user’s external e-mail account to download e-mail addresses, according to the complaint.

Linkedln does not inform its users that e-mail addresses harvested from a user’s external e-mail account will be sent multiple e-mails inviting the recipient to join Linkedln with the user’s endorsement, the complaint said. Users have complained to Linkedln about its "unethical harvesting" of e-mail addresses and repeated spamming of those addresses, according to the complaint, which asks the court for damages and an order prohibiting LinkedIn from continuing its "wrongful and unlawful acts".

IDG News Service

Read More:


Back to Top ↑

TechCentral.ie