What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Guardian Jobs website hacked...

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Post #1
FYI…

Guardian Jobs website hacked…
- http://www.sophos.com/blogs/gc/g/2009/10/2…onal-data-risk/
October 25, 2009 - "… the UK version of the Guardian Jobs website has been broken into by hackers. The site, which is described as one of the top five job websites in the UK, with some two million users a month, would be a rich data mine for identity thieves who would be rubbing their hands in glee at the prospect of getting their hands on confidential information from innocent people's CVs and job applications. Details of how the hack was committed have not been revealed, but warning emails sent to people who have used the jobs.guardian.co.uk site to make job applications described the attack as "sophisticated and deliberate"… this isn't the first time that online recruitment websites have suffered at the hands of cybercriminals. Earlier this year… the databases of Monster.com and USAJobs.gov were compromised*, and contact and account information was stolen…"
* http://www.sophos.com/blogs/gc/g/2009/01/2…-usajobs-users/

:ph34r:
Post #2
Interesting. The most critical targets for vandalism are not always the high price, high interest sites such as banking. A participant is actually more likely to include "more" personally identifying information in a job application than in a bank transaction. Smart Crooks. Especially because pressure to protect banking and credit card transaction sites is more likely to be scrutinized more carefully than job application sites.
Post #4
Wow…to the regular non tech person (not that I am one) this is something you do not think about, specially how the job market is right now you just want to post your resume anywhere you can….and also this company is not taking any responsibility for their fail to secure the data for these people. They can at least try to sound a little bit understanding and apologetic, but I guess that would be admitting fault and bring big time litigation against them. ;)