Irish job website RecruitIreland.com is currently offline after being hit by hackers who breached their systems, and stole the names and email addresses of 400,000 users.
A statement elsewhere on the website says that the authorities have been informed, and that some users have received spam emails claiming to offer a job. Although in reality the spams are attempting to recruit innocent people as money mules to move funds on behalf of fraudsters.
Clearly it's a ghastly situation for the RecruitIreland website, and its users have been left exposed by the security breach. Questions will no doubt be asked as to why the sensitive information was not held securely (was encryption being used?) and how it was possible for hackers to steal such valuable data.
It isn't much consolation to the Irish workers who have had their details exposed in this hack, but this isn't the first time that cybercriminals have targeted recruitment websites.
For instance, in 2007 hackers used the Monstres Trojan horse to steal details from Monster.com of jobseekers via recruiter accounts. That hack was unsurprisingly followed up by a widespread phishing email campaign.
There was more bad news for Monster.com two years ago, when its database was compromised and information was stolen. Data stolen then included users' login names, passwords, email addresses, names, and phone numbers.
Follow @gcluley
![Password security infomerical leaves Ellen DeGeneres in disbelief.. and it will you too [VIDEO]](http://sophosnews.files.wordpress.com/2013/04/ellen-thumb.jpg?w=75&h=75&crop=1)
![Can multiple moving cursors really hide your password from spyware and peepers? [VIDEO]](http://sophosnews.files.wordpress.com/2013/03/cursors-thumb.jpg?w=75&h=75&crop=1)
![Hacked TV channels broadcast zombie apocalypse emergency alert [VIDEO]](http://sophosnews.files.wordpress.com/2013/02/zombie-thumb.jpg?w=75&h=75&crop=1)
This is EXACTLY why I use a temporary e-mail address, that I don't use
ANYWHERE else when I'm searching for a job.
I set-up a g-mail account with something like bostonapplicant, or chicagojobseeker
and use it on all the job sites. I never post a resume, I just submit one
individually with each job I wish to apply for. That way, when I get the,
"We have reviewed your resume and your skills are exactly what we are
looking for!" I know it is a SCAM!
This also protects me in another way. When my potential employer Googles
my e-mail address, or tries to find it on a social network. It isn't there!
So they don't find out that my musical taste is stuck back in 80's and
that I spend too much time watching Family Guy.