Over 1.1 million user files were leaked through enormous data injuries on the Top Jobseeker platform

Bewerted, an important European work platform for job searchers, kept an open Google database online
The database contained more than 1.1 million data records, mainly CVs and CVs
Data belonged around the world and could now be at risk

According to researchers, a large European employment platform has reportedly triggered sensitive data from up to one million users, claims

Cybernews Has discovered its researchers who discovered an unprotected Google Cloud Storage (GCS) -Kucker, which is involved and is called “one of the largest employment platforms in Europe”.

The bucket contained more than 1.1 million files, mainly CVs and résumés of job seekers, from people around the world, including Spain, Argentina, Guatemala, Honduras and much more.

You like

No answer

However, anyone who found the database in advance would receive the full names, telephone numbers, e -mail addresses, postal addresses, birth dates, national ID numbers, nationalities, birthplaces, social media links, employment history and educational background.

This is more than enough information to carry out tailor-made phishing, identity theft or wire fraud. Job offers are often the topic in Phishing -E emails, and the identity of people looking for a new position offers cybercriminals a unique opportunity to create convincing phishing emails.

Through these you could deliver malware, steal login information, collapse the IT network of your current employers and much more.

With the headquarters in Madrid, Spain, with offices in Mexico, Germany and Great Britain, has been described as a software-as-a-service (SaaS) fabrication for companies that combine job seekers with potential employers.

Register with the Techradar Pro newsletter to get all top messages, opinions, functions and instructions that your company needs to be successful!

Cybernews' researchers said they had tried to contact overlaps and get the company to complete the database, but the company never answered one of their inquiries. As a result, “the data remain open to the public,” they said.

The team discovered the unprotected GCS bucket in November 2024, so that it has been open for at least half a year.

Anyone who knew where to look (by using special search engines like Shodan would have already found it. Without forensic analysis, however, it is impossible to determine whether this has already happened or not.

You could also like

Leave a Comment Cancel reply