Story image

JobStreet confirms hit by Malaysia data leak - almost 3.9m accounts affected

03 Nov 2017

JobStreet is informing clients by email whether they were caught up in a Malaysia-based data breach that affected 19 different companies.

 “We are writing to notify you that we recently identified a post claiming that personal information from the databases of 19 corporations and associations had been made public, including ours,” the email says.

According to website haveibeenpwned.com, 3,883,455 JobStreet accounts were affected by the breach. It says the information was freely downloadable on a Tor hidden service.

The breach also affected more than 46 million Malaysian users and several telecommunications companies.

Telecommunications providers caught by the breach include Altel, Celcom, DiGi, EnablingAsia, Friendi, Maxis, Merchantrade Asia, PLDT, Redtone, Tunetalk, Umobile and XoX, reports suggest.

It also affected organisations such as the Academy of Medicine Malaysia, the Malaysian Dental Association, the Malaysian Medical Association, and the National Specialist Register of Malaysia. Reports speculate that more than 81,000 records were stolen from these organisations.

“Our investigations established that some personal candidate information pertaining to accounts created before July 2012 has been exposed. To help protect our customers, the team is continuously enhancing our security measures for all user information stored with JobStreet.com,” JobStreet CEO Suresh Thiru says in an email.

According to media reports, that personal information includes identity card numbers, addresses, login IDs, passwords, names, emails and phone numbers.

Haveibeenpwned.com also notes that on JobStreet, dates of birth, genders, geographic locations, marital statuses, nationalities and usernames were also compromised.

The Malaysian Communications and Multimedia Commission (MCMC) may have discovered the possible source of the data leaks, according to Malaysian Communications Minister Salleh Said Keruak.

"We have identified several potential sources of the leak and we should be able to complete the probe soon," he announced.

According to JobStreet’s website, more than 15 million candidates have found jobs through the platform. The company was founded in Malaysia in 1997 and has a team of 800 employees. It hosts more than 15,000 jobs per day.

It also operates websites across Malaysia, Singapore, the Philippines, India, Indonesia and Vietnam.

In 2014, the company joined the Australian firm SEEK, which manages job listing websites in Australia and New Zealand.

“Your privacy and success in finding the right talent is incredibly important to us. If you have any queries, please do not hesitate to contact our Customer Care at +60-3-2176 0333 or email corpcare-my@jobstreet.com,” the email concludes.

Oracle updates enterprise blockchain platform
Oracle’s enterprise blockchain has been updated to include more capabilities to enhance development, integration, and deployment of customers’ new blockchain applications.
Used device market held back by lack of data security regulations
Mobile device users are sceptical about trading in their old device because they are concerned that data on those devices may be accessed or compromised after they hand it over.
Gartner names ExtraHop leader in network performance monitoring
ExtraHop provides enterprise cyber analytics that deliver security and performance from the inside out.
Symantec acquires zero trust innovator Luminate Security
Luminate’s Secure Access Cloud is supposedly natively constructed for a cloud-oriented, perimeter-less world.
Palo Alto releases new, feature-rich firewall
Palo Alto is calling it the ‘fastest-ever next-generation firewall’ with integrated cloud-based DNS Security service to stop attacks.
The right to be forgotten online could soon be forgotten
Despite bolstering free speech and access to information, the internet can be a double-edged sword, because that access to information goes both ways.
Opinion: 4 Ransomware trends to watch in 2019
Recorded Future's Allan Liska looks at the past big ransomware attacks thus far to predict what's coming this year.
Red Box gains compliance boost with new partnership
By partnering with Global Relay, voice platform provider Red Box is improving the security of its offerings for high-value and risk voice data.