Another Job Board Hacked
The job board operated by U.K. newspaper The Guardian was reportedly hacked this past weekend and about 500,000 resumes and other information valuable to identity theft scum walked out the door. The response from The Guardian? Pathetic. They recommended that their users buy fraud prevention services. I wouldn't be surprised if The Guardian received commissions on the sale of those services, which would make this intolerable situation even worse as The Guardian would be profiting off of the inadequate security measures that it chose to put into place.
A number of job boards have been hacked and many, many more will be. The information contained in a job seeker registration is quite valuable to those who want to profit by stealing the identity of others. Many job seekers include their entire work history, educational background, contact information, and even social security numbers. Anyone with access to that information can take out a credit card in your name and then use that card to fraudulently buy products. They're stealing from the retailers in some cases and the banks in many other cases, but they're also stealing from the job seeker even if the job seeker ends up not being saddled with the bill because the fraud will inevitably harm the credit score of the job seeker.
This is one of the primary reasons why 1.5 years we became the first major job board to kill its resume searching tool. The risk of hacking and identity theft is too great and increasing. Job boards cannot properly secure their resume banks while at the same time making them easy to log into for their employer clients. When I.T.'s security interests are pitted against marketing's sales interests, guess who tends to win?
The International Association of Employment Web Sites (IAEWS) meets next week in Chicago. Hopefully this issue will (again) be raised and hopefully more job boards will choose to follow our lead. We followed the lead of RecruitingNevada.com. A representative from that site talked about how and why they never allowed resume searching. I was convinced their approach was correct so we killed resume searching shortly afterward.










Leave a comment