PERSOL Career: a flaw in the doda system for ad sales agencies let agencies view data of 549,195 recruiters

PERSOL Career announced on 17 September 2024 that, because of a flaw in a system provided to sales agencies for job ads on its "doda" job change service, personal data similar to business card details of some recruiters at its corporate customers had been viewable by 1,164 agencies and agency subcontractors. 549,195 people are affected, for the period from 18:00 on 31 May 2018 to 20:00 on 30 August 2024. Company names, company addresses, departments, titles, names (including kana) and email addresses are affected; phone numbers are not. It came to light when a recruiter approached by an agency with no business relationship asked where the data came from and contacted the company. Specification review and privacy checks during development were insufficient, so recruiter data from the internal core database was linked to the system. The system was fixed on 30 August.