Daily News

View All News

UK – Two online recruitment firms expose over 200,000 CVs online (Sky News)

17 October 2019

Two online recruitment firms have exposed more than 200,000 CVs, revealing jobseekers' names, addresses, phone numbers and career histories to potential cyber criminals, Sky News reports. Sonic Jobs, a UK retail and restaurant jobs app used by the Marriott and InterContinental hotel chains, exposed 29,202 CVs. Authentic Jobs, a US-based job board used by companies including the New York Times made 221,130 CVs publicly accessible. The total numbers may be higher as the service used to detect the leaks only refreshes irregularly. Both firms exposed the CVs through their cloud storage service, which stores data in servers connected to the internet. The firms made the settings on their "buckets" - cloud storage folders provided by Amazon Web Services (AWS) public. After they were contacted by Sky News, both companies made their buckets private. Both firms said they are reviewing how the settings were made public.