LinkedIn email address security

LinkedIn contact email addresses seems to be a tricky mess.

Today I got a message from a friend asking me why she got a confirmation from LinkedIn that I had changed my password. The confirmation was (at least by name) addressed to me.

After some digging in the LinkedIn settings I found that I had six email addresses registered to receive email from LinkedIn. I only recall entering one, maybe two, of the addresses.

The really bad part is that one of them was to a mailing list and I certainly did NOT put that address in my contact settings by free will.

As far as I can tell the password reset confirmation is the only message that was sent to all those addresses and it was sent on the 14th of may 2014.

Do you have any idea of how those unwanted addresses were added to my LinkedIn account settings?