FYI...

Guardian Jobs website hacked...
- http://www.sophos.com/blogs/gc/g/2009/10/2...onal-data-risk/
October 25, 2009 - "... the UK version of the Guardian Jobs website has been broken into by hackers. The site, which is described as one of the top five job websites in the UK, with some two million users a month, would be a rich data mine for identity thieves who would be rubbing their hands in glee at the prospect of getting their hands on confidential information from innocent people's CVs and job applications. Details of how the hack was committed have not been revealed, but warning emails sent to people who have used the jobs.guardian.co.uk site to make job applications described the attack as "sophisticated and deliberate"... this isn't the first time that online recruitment websites have suffered at the hands of cybercriminals. Earlier this year... the databases of Monster.com and USAJobs.gov were compromised*, and contact and account information was stolen..."
* http://www.sophos.com/blogs/gc/g/2009/01/2...-usajobs-users/

Interesting.

The most critical targets for vandalism are not always the high price, high interest sites such as banking.
A participant is actually more likely to include "more" personally identifying information in a job application than in a bank transaction.

Smart Crooks.

Especially because pressure to protect banking and credit card transaction sites is more likely to be scrutinized more carefully than job application sites.

Outsourced, of course...

- http://www.theinquirer.net/inquirer/news/1...an-jobs-website
26 October 2009 - "... Red-faced officials are now saying that the company that runs the website on behalf of the newspaper has identified how the hackers got in..."

The ol' "Let's have somebody else do it so we can always blame them instead of us".

IMHO: "We have found the enemy and he is us".

Wow...to the regular non tech person (not that I am one) this is something you do not think about, specially how the job market is right now you just want to post your resume anywhere you can....and also this company is not taking any responsibility for their fail to secure the data for these people. They can at least try to sound a little bit understanding and apologetic, but I guess that would be admitting fault and bring big time litigation against them.

interesting