Earlier this week, it was reported that the 2012 breach of LinkedIn was far worse than originally thought: instead of the 6.5 million stolen records that were reported at the time, it turned out that 167 million users were affected. 117 million of these records contained the user’s email address and password.

It wasn’t until this bigger breach was sold in dark web communities that everyone became aware of this bigger problem. LinkedIn issued a blog post that confirmed the leaked data was authentic and asked affected users to reset their passwords.