[Resolved][Severity: Critical][Intrusion]

Mirai Works: its side-job support site Skill Shift was accessed without authorization, leaking the application attachments of 1,053 individual members and more

A server was accessed without authorization, and the resumes and other attachments of 1,053 members and photos of 1,965 members leaked, along with corporate member data.

Disclosed

2021-04-13

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2021-04-06
The company found traces of unauthorized access. It cut the related servers off from the network and investigated the route and extent. It found that some information on the servers had leaked. [1]
2021-04-09
The company began contacting the individual members concerned one by one. [1]

Impact

So far, the attachments that 1,053 individual members sent when applying (resumes, work histories and other documents) have been found to have leaked. Photos of 1,965 people were also affected. Information on corporate members and partners leaked too. [1]

The company was investigating how the access happened, its cause and its extent with the help of outside specialists. [1]