LinkedIn Faces Spying Claims Over Secret Browser Extension Scans

LinkedIn is dealing with heavy criticism after a new security report revealed it runs a hidden script to scan the computers of people visiting the site. A German group representing commercial users claims the massive professional network secretly checks browsers for thousands of installed extensions.

The group calls this a major espionage operation, raising serious questions about how the platform handles user privacy, monitors daily activity, and tracks personal device data.

LinkedIn’s hidden scripts look for tax software, hardware details, and detailed work histories

The report, dubbed BrowserGate, explains that LinkedIn injects a silent file into every page load. This script probes Chromium-based browsers for over 6,000 specific extensions. Many of these targeted tools are sales intelligence products that directly compete with the platform. However, the scan also looks for grammar checkers, tax software, and even extensions that might reveal a person’s political or religious views.

Along with checking for extensions, the script harvests hardware details like available memory, processor core count, screen resolution, and battery status. Since user profiles display real names and detailed work histories, privacy advocates worry that this data can easily identify individuals.

They argue that linking specific browser habits to an actual person crosses a clear privacy line, especially when the scanning happens completely in the background.

LinkedIn has denied all spying allegations through browsers

Microsoft-owned company LinkedIn strongly denies the spying allegations. The company states it only collects this data to stop automated bots from scraping user information without permission. A spokesperson clarified that it does not use the findings to guess sensitive details about its members. Instead, it claims the main goal is to block tools that violate site rules and to keep the servers running smoothly for everyone.

The company also pointed out that the group behind the report includes a developer whose account was previously restricted for unauthorized data collection. A German court even ruled against that individual in a related lawsuit.

Despite this legal defense, privacy experts and everyday users remain upset that the site does not clearly mention this extensive scanning practice anywhere in its official privacy policy.

Via Beepingcomputer