| Hackers expose 3.5 million CVs held on job search sites |
| Friday, 28 May 2010 10:12 | |
|
UK job search sites, run by the Trinity Mirror Group, were hacked on May the 19th, according to The Register.
The newspaper group doesn't believe CVs from the 3.5 million users were copied or accessed, but they suspended all user accounts and issued new passwords. Writing in a blog post, the company described it as a "concerted and sophisticated attempt to hack into user accounts," and warned people to change their passwords if they were using them on multiple websites. A spokesman for Trinity Mirror said: "The attacks were on dormant accounts and did not get beyond log-in details - no CVs or other personal information was accessed. We informed the ICO as a matter of courtesy." Writing in another blog post on a job search website, Trinity Mirror wrote: "We do not know whether email addresses and passwords were taken, but we believe that unfortunately you should work on the basis that they were. All passwords were changed within 4 hours of the hack being identified and we have not seen any attempts to use the expired passwords on our websites. We apologise for the inconvenience and disruption this illegal activity has caused and assure you that we have taken, and are taking, precautions to try and prevent any further such attacks." One way to help prevent such attacks comes in the form of a managed firewall. This kind of remote network support prevents threats to security from reaching the computer and de-stabilising a business.
|
