logo

LinkedIn secretly scans for 6,000+ Chrome extensions, collects data

ID: c45197bd-559c-5087-a518-17386193c44e

STIX ID: report--c45197bd-559c-5087-a518-17386193c44e

Feed Name: Bleeping Computer

Threat Score
35/100

Date Published: 2026-04-03

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

**Executive summary:** The "BrowserGate" report alleges LinkedIn injects hidden JavaScript into user sessions to fingerprint browsers by checking for thousands of extensions (reported up to 6,236) and collecting device metadata, which could be linked to real identities and corporate customers; independent testing by BleepingComputer confirms the presence and scale of the fingerprinting script, while LinkedIn says the detection is used to prevent scraping and protect site stability. The activity poses privacy and tracking risks, but the report lacks definitive proof that LinkedIn has used the collected data for broader profiling or third-party sharing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.