Sharefull: up to 7.5 million accounts at risk, including bank-account details

The internal management system was accessed without authorization at about 23:30 on 4 November; detection followed at about 09:45 on 5 November and access was blocked by 14:00. Up to approximately 7,500,000 user accounts and 7,500 hiring companies may be affected. These are separate at-risk ceilings, not counts to add together. [1]

Potentially exposed user data includes names, contact details, addresses, birth dates, payroll bank accounts, stored face-photo URLs, emergency contacts, residence-status information and account attributes such as registration dates, work counts and preferences. The notice does not confirm acquisition of the photos themselves. Hiring-company contact and sales-management data may also be affected. Bank PINs and passwords are excluded. [1]

Salary/points, contract and employment-management records, and identity-document images are excluded; My Number and card data are not held. Service continues normally, and no intrusion into Sharefull Shift is confirmed. Investigation and individual notifications continue. [1]