JobStreet data breach: 3.9M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2017-10-30
In October 2017, the Malaysian website lowyat.net ran a story on a massive set of breached data affecting millions of Malaysians after someone posted it for sale on their forums. The data spanned multiple separate breaches including the JobStreet jobs website which contained almost 4 million unique email addresses. The dates in the breach indicate the incident occurred in March 2012. The data later appeared freely downloadable on a Tor hidden service and contained extensive information on job seekers including names, genders, birth dates, phone numbers, physical addresses and passwords. Exposed data: dates of birth, email addresses, genders, geographic locations, government issued ids, marital statuses, names, nationalities, passwords, phone numbers, physical addresses, usernames. The breach dates from Mar 7, 2012; Have I Been Pwned loaded it on Oct 30, 2017.
What to do
- If you had a JobStreet account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
