LinkedIn is facing a $5 million class-action lawsuit after 6.5 million users had their passwords stolen. LinkedIn is accused of not following industry standards for security. LinkedIn does not show users’ email addresses, it does allow for good old-fashioned social engineering pretexting to plan the attack. LinkedIn recommends for members to “connect only with people that they know and trust” and “use common sense and tools available to ensure that they don’t fall prey” There are script-kiddie kits to help in creating such phishing emails.”]

