A major controversy has broken out involving LinkedIn, the popular professional networking site. According to an investigation named BrowserGate, the Microsoft-owned platform is allegedly using hidden code to peek at the software and tools installed on the computers of its one billion users.
This study was conducted by Fairlinked e.V., a group representing businesses and professionals who use the site, which dubbed it “one of the largest corporate espionage and data breach scandals in digital history.”
How the Surveillance Works
LinkedIn is a platform where we use our real names and job titles. Because of this, the investigation claims the platform isn’t just tracking anonymous data but allegedly linking specific software choices back to real people and the companies they work for.
According to the group’s findings, when you visit the site, a hidden script runs in the background, searching for over 6,000 different browser extensions. Fairlinked, reportedly, found that this list of monitored tools has grown massively, jumping from around 461 in 2024 to over 6000 by February 2026.
Privacy and Business Concerns
The report raises serious concerns about personal privacy. By scanning for certain tools, LinkedIn can allegedly figure out a person’s religious beliefs, political views, or if they are neurodivergent, a term used for people whose brains process information differently, such as those with ADHD or autism. It also allegedly tracks over 500 job-seeking tools, which could alert an employer if a staff member is quietly looking for a new role.
There is also the issue of corporate espionage. The report claims LinkedIn scans for over 200 products that compete with its own services, like Lusha, Apollo, and ZoomInfo, to see which companies are using them. Some of this data is allegedly shared with HUMAN Security (an American-Israeli firm) using invisible tracking pixels (tiny images that track your activity without you knowing).
Allegations of Deceiving Regulators
The investigation suggests LinkedIn is also dodging European rules. In 2023, the EU ordered LinkedIn to open up its system to other companies. LinkedIn claimed it did this by providing two Public APIs. Fairlinked claims these are barely used, handling just 0.07 calls per second, whereas LinkedIn’s own Internal API, Voyager, handles a massive 163,000 requests every second.
LinkedIn’s Response
LinkedIn has strongly denied these accusations, arguing that the individual behind it is a developer of a tool called Teamfluence, whose account was restricted for breaking the platform’s rules. A German court recently sided with LinkedIn, denying the developer’s request for an injunction.
While LinkedIn admits to checking for certain extensions, they claim it is only to stop scammers and scraping, where automated tools steal large amounts of data, to keep the site stable. The company insists they do not use this information to guess sensitive details about its members. For now, while the reasons for the scanning are debated, it is clear that LinkedIn is keeping a much closer eye on your browser than most users ever realised.
