Have A LinkedIn Account? Better Go Change Your Password

A hacker claims to have stolen 6.46 million LinkedIn passwords and posted the list online as proof.

The list—announced on a Russian forum—appears to be real, an expert says; users tell ZDNet that they have indeed found their passwords on the list.

LinkedIn’s encryption system is “secure,” so it may take a while to decode the information, but it’s not “foolproof,” the Verge notes. Hackers may also have gotten their hands on email addresses, a Finnish security firm says. Experts recommend users change their passwords now. LinkedIn says it’s “looking into” the reports.