Data breach at recruitment site

By Aoife Carr, The Irish Times

Gardaí are investigated a security breach at the recruitment website RecruitIreland.com.

It is thought that names and e-mail addresses of those registered with the site were accessed for spamming purposes. The site was shut down yesterday afternoon when the breach was noticed.

Gardaí  and the Data Protection Commissioner have been informed.

CVs, usernames and passwords are not thought to have been compromised.

In a statement, the company said it was taking the incident very seriously. It warned users not to reply to any spam email or comply with any requests for information such as bank account details.

To see the full article visit the irishtimes.com >>

 Here is the official statement from RecruitIreland.com

Databreach on RecruitIreland.com

We are sending you this email to notify you of a breach of our data today. At 1.50pm we became aware of the breach. Following this we received several spam emails similar to the one below (which you may also have received by now).

We shut down access to the site and database at 2pm and immediately informed the Data Protection Commissioner and the Gardai. We take this incident and any attempted breach of our database extremely seriously and this is being investigated internally by our own people, externally by Brian Honan who is a security expert and by Gardai. We are doing everything necessary to have the website back up and running securely as soon as possible. Please bear with us while we complete a thorough and professional review of the site and it’s security provisions. 

As of now we know the following;

• Data compromised was first name, last name and email address
• As a result you may receive a spam email with your first name, last name included
• Your anti-spam software should catch it
• Please do not reply to this mail from the spammers or comply with any requests for information such as bank account details etc 

The present indicators are that our database was breached to get email addresses and names for spamming purposes. 

From our investigations to date no other data, including CVs, usernames or passwords have been compromised. However if you wish you may change your username and password when we are back up and running.

We apologise for any inconvenience this may cause and assure you we have a professional team working hard to get this resolved. 

If you wish to be removed from our database please email us at remove@recruitireland.com and we will remove you from our database within 2 working days.

Regards

The RecruitIreland.com Team