According to Cyber news, the incident originated from a properly set Microsoft Blob cloud storage, allowing public access without verification. Most of the nearly 26 million leaked files are preliminary resumes of US job seekers, including: name, email, phone number, education level, and employment history.
The data source is said to belong to TalentHook - a candidate tracking software owned by Resource Edge (Nevada, USA). This is a tool to connect employers and job seekers.
Cyber news warns that leaked information could be exploited to carry out sophisticated fraud campaigns. From fake emails, messages to virtual work invitations, scammers can lure victims to provide bank information or a scan of their personal documents. In addition, they can impersonate employers and demand payment for procedures such as checking records or fake training courses.
The incident once again shows the serious risks of lax personal data management, especially in the recruitment sector, where users are willing to share a lot of sensitive information.
