From OP, > He claims the data was obtained by exploiting the LinkedIn API to harvest information that people upload to the site. > our initial analysis indica

From OP, > He claims the data was obtained by exploiting the LinkedIn API to harvest information that people upload to the site. > our initial analysis indicates that the dataset includes information scraped from LinkedIn as well as information obtained from other sources. This was not a LinkedIn data breach and our investigation has determined that no private LinkedIn member data was exposed. If the attacker is telling the truth, Then somehow the attacker has gained access to privileged API of LinkedIn which gives out more fields than those listed in the official LinkedIn API doc[1]. If LinkedIn is telling the truth, Then the source of breach is most likely one of the many data brokers who have been breached several times in the past[2]. [1] https://docs.microsoft.com/en-us/linkedin/shared/references/v2/profile/full-profile https://docs.microsoft.com/en-us/linkedin/shared/references/... [2] https://news.ycombinator.com/item?id=21606415 https://news.ycombinator.com/item?id=21606415