> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Rejob: intruders reached a test server of the job site Rejob, leaking up to 206,991 job seekers' records

Someone got into a test server of the job site Rejob and took names, passwords and other data of job seekers who registered before December 2015.

Disclosed

2020-04-19

Organizations involved

1

Leaked or at risk

207K

206,991

Downtime

Unknown

What happened

  1. An occasional check of a test server found logs of unauthorized access. [1]

  2. Public disclosure. The test server was cut off and stopped, and the job seekers' data on it was deleted. [1]

Impact

Names, addresses, birth dates, phone numbers, email addresses, passwords and other data of up to 206,991 job seekers who registered on or before leaked. [1]

Response

The company reported to the Tokyo Metropolitan Police and confirmed that no server could be reached by SSH or similar from outside IP addresses. [1]

Timeline

  1. Detected 2020-04-17
  2. Disclosed 2020-04-19
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Date of birth][Phone number][E-mail address][Passwords]

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]求人サイト「リジョブ」ネットワークに不正アクセス、テストサーバのチェックで判明（リジョブ）ScanNetSecurity · 2020-04-22 08:00