Wantedly: access setting errors exposed data of 200,578 users on unpublished pages

Wantedly announced on 24 April 2024 that, because of a system setting error on its business social network "Wantedly", unpublished and deleted job posts and company pages could be viewed by third parties without access rights by entering their URLs. The problem was found during maintenance on 10 April and fixed on the 11th. A review of other features then found 10 similar flaws, all fixed by 11 June. According to its third report of 30 July, 24,435 company pages and 194,733 job posts, together with names, employers, job titles, profile images, self-introductions and more of 200,578 users listed on them as members, may have been viewed. The exposure lasted from 17 October 2013 to 10 June 2024.