TLDR InfoSec · ATTACKS & VULNERABILITIES
2M RECORDS EXPOSED BY A TECH RECRUITMENT SERVICE
Summary from the TLDR InfoSec newsletter
A publicly exposed, unprotected database belonging to Alltech Consulting Services containing 2M records of data belonging to over 200K job seekers was discovered. The records included salary expectations, work experience information, internal notes, names, email addresses, phone numbers, last four digits of SSNs, and passport numbers. The finding was responsibly disclosed to Alltech Consulting Services, which password-protected the database the following day.