Data breach exposes personal info of jobseekers

More than 6,000 CVs and covering letters allegedly surfaced online

Data breach exposes personal info of jobseekers

A recruitment firm working for Australian real estate network First National has been linked to an incident of data breach after thousands of CVs and covering letters from candidates were allegedly leaked online.

The recruitment agency Sales Inventory Profile reportedly handled candidate screening for First National, collecting personal information and requiring jobseekers to upload their CV in the process.

A data breach allegedly exposed the full names, addresses, educational background, and employment history of job candidates, according to Gareth Llewellyn, an information security specialist for Brass Horn Communications, who first detected the leak.

Llewellyn said he found an indexed Amazon S3 bucket that contained more than 6,000 CVs and covering letters.

First National denied responsibility for the breach and said it was “dependent upon” Sales Inventory Profile to follow necessary security protocols.

“We are working with our affected offices, and more importantly, any applicants that have been affected,” said Ray Ellis, CEO at First National. The company said it has notified the Office of the Australian Information Commissioner.

HRD has reached out to Sales Inventory Profile for comment.

PageUp, another talent management software company based in Australia, also suffered a data breach last year when malicious activity was discovered on its IT system.

The malware attack exposed the personal data of thousands of jobseekers who used the recruitment site, HR Tech News reported in June.  


Recent articles & video

1 in 5 employers using non-compete clauses: ABS

'Go all in on understanding how to make your workplace neuro-inclusive'

Wage growth increased 4.2% in 2023 to outpace inflation

SA extends up to $50,000 to help more South Australians find work

Most Read Articles

Pay hikes in Australia projected to reach 4% in 2024

Good news: Employee intent to stay with employer rises

Government to remove criminal penalties in right to disconnect