Employment agency hacked. 40,000 personal details uploaded online

[Fitz4i]

The personal details of some 40,000 job applicants have been leaked online, following a cyber attack on an employment agency here.

Protemps Employment Services, which has an office at Paya Lebar Square, had its entire server swiped and deleted earlier this month.

The personal details of about 40,000 people who submitted job applications to the company have since been uploaded online.

The details include scans of their identity cards or passports, their phone numbers, salaries, jobs and home addresses.

Most of the job seekers appeared to be Singaporean.

The hackers, known as Desorden Group, said they were behind the attack on Oct 4, boasting about their heist on hacking forums on Oct 7.

They made a video showing the stolen files and databases, with a message to Protemps, saying they had stolen all the files from the server and had wiped it clean.

It also came with a warning for Protemps to "think carefully".

The video is believed to have been sent to Protemps along with a ransom note.

On Oct 14, Desorden Group uploaded the entire database online, making it accessible for the price of €2.10 (S$3.30).

https://www.straitstimes.com/singapore/courts-crime/spore-employment-agency-hacked-ic-scans-and-salaries-of-40000-job-seekershttps://www.straitstimes.com/singapore/courts-crime/spore-employment-agency-hacked-ic-scans-and-salaries-of-40000-job-seekers

😱😱😱

[Ct3833]

I am sure it has been  a police case already, and those who get caught paying for the data will be in trouble too. Most who bought the data are likely the competitors.

Cyber security is a big business now. Even the big IT setup are facing challenges,  it is better for smaller setup to subscribe to cloud services than to run their own IT infra. 

Edited October 21, 2021 by Ct3833

[Volvobrick]

  On 10/21/2021 at 2:36 PM, Ct3833 said:

I am sure it has been  a police case already, and those who get caught paying for the data will be in trouble too. Most who bought the data are likely the competitors.

Cyber security is a big business now. Even the big IT setup are facing challenges,  it is better for smaller setup to subscribe to cloud services than to run their own IT infra. 

Expand  

Sounds like conspiracy theory..... Hacking encourages more to move to cloud service providers. 

So who are sponsoring the hackers? 

[Jamesc]

I wouldn't like to the Data Protection Office

for that company!

Under the PDPA, organisations are required to designate at least one individual as the data protection officer (DPO) to oversee data.

[Jamesc]

This sort of thing is happening too often.

After it happens we just get statement like - every effort has been made to protect the data of our customer etc etc

Now if every effort had been made then people's data would not have been hacked!

[Watwheels]

Isnt it illegal for any organization to keep copies of IC? This law I think started back in 2019?

https://www.straitstimes.com/singapore/collecting-nric-numbers-and-making-copies-of-the-identity-card-will-be-illegal-from-sept-1

[Ct3833]

  On 10/21/2021 at 2:51 PM, Volvobrick said:

Sounds like conspiracy theory..... Hacking encourages more to move to cloud service providers. 

So who are sponsoring the hackers? 

Expand  

I am not saying cloud providers are the master mind behind the scene but I am saying  it is better for smaller setup who have no professional knowledge to subscribe to cloud service which are a lot better managed in cyber security. But that does not mean they are foolproof, just that they are more professional and knowledgeable in this aspect.  One day we may see a cloud provider get hacked as well, nothing is impossible. 

hackers are just like thieves or robbers, they steal your stuff , in this case is information of commercial value, then they will hold the company ransom . This may be a small case, but one day when they could successfully hack a big one, they could ask form millions of $ in return. 

 

[Throttle2]

Aiyah, private company, employment agency get hack , no big deal lah.

even govt agencies already kena….. got any heads roll?  Hara kiri boh?

😗😗