LinkedIn Is Illegally Searching Your Computer
A report from Fairlinked e.V. alleges LinkedIn is conducting a massive, illegal corporate espionage operation by secretly scanning user computers for installed software, collecting sensitive personal data, and engaging in trade secret theft. This story resonates on Hacker News due to its implications for user privacy, corporate ethics, and potential regulatory deception by a major tech platform. It highlights a brazen disregard for user consent and legal compliance that frequently sparks outrage and debate in the HN community.
The Lowdown
Fairlinked e.V., an association of commercial LinkedIn users, has launched the "BrowserGate" investigation, accusing LinkedIn of engaging in one of the largest corporate espionage operations in modern history. The organization claims that every time a user visits linkedin.com, hidden code scans their computer for installed software, transmitting the data to LinkedIn and third parties without user consent or disclosure in their privacy policy. Fairlinked e.V. asserts this practice is illegal and potentially criminal across various jurisdictions.
Key findings from their investigation include:
- Mass Breach of Personal Data: LinkedIn's scans allegedly reveal highly sensitive personal data, including religious beliefs, political opinions, disabilities, and job search activity, which is explicitly prohibited under EU law without consent or disclosure.
- Corporate Espionage and Trade Secret Theft: The platform is accused of scanning for over 200 competitor products, mapping which companies use them, effectively extracting customer lists from thousands of software companies, and using this data to threaten users of third-party tools.
- Deceiving EU Regulators: Despite being designated a gatekeeper under the Digital Markets Act and ordered to open its platform, LinkedIn allegedly presented highly restricted APIs while simultaneously expanding its surveillance of third-party tools, from 461 products in 2024 to over 6,000 by February 2026.
- Shipping Data to Third Parties: The report details the loading of invisible tracking elements from HUMAN Security (formerly PerimeterX) and a silent script from Google, all encrypted and undisclosed, which set cookies and fingerprint users.
Fairlinked e.V. emphasizes the significant resources of Microsoft and LinkedIn, stating they possess the evidence but require public support and funding to pursue legal action and hold the companies accountable for these alleged breaches.