Hackers Breach USA Jobs and Monster Sites
Don’t be a “phish”
USAJobs, the official job site of the federal government, has issued a special security alert that its site has been hacked.
“Certain contact and account data were taken, including user IDs and passwords, email addresses, names, phone numbers, and some basic demographic data,” according to a statement by Mary Volz-Peacock, USAJobs program director.
The information accessed does not include resumes or sensitive data such as Social Security numbers or personal financial information.
But, she warns, the stolen data could be used in phishing schemes, a type of fraud in which scammers, in order to obtain personal information, send email messages that appear to come from legitimate organizations. In this case, fraudulent emails could look like they’re from the U.S. government.
“USAJobs will never send an unsolicited email asking you to confirm your username and password, nor will Monster ask you to download any software, ‘tool’ or ‘access agreement’ in order to use your USAJobs account,” Peacock wrote.
People with USAJobs passwords may soon be required to change them; for now, users are being advised to change them.
USAJobs is powered by Monster.com, the Internet employment service, whose database security was breached on January 23. Monster issued a warning that day.
According to the Washington Post, a mandatory change of email passwords for Monster clients is now in effect. Monster users are being told to be on the lookout for suspicious emails as well.
Published February 2, 2009
Susan Hindman
Silver Planet Feature Writer
