HEADS UP!! USAJOBS Website Hacked - Personal Info Of Job Seekers Stolen

**Backstop** · August 31st, 2007, 21:02

Just got this via email.

Big time

----- Forwarded message from SecurityNotice@fedjobs.gov -----

Date: Fri, 31 Aug 2007 05:06:19 -0500
From: SecurityNotice@fedjobs.gov
Reply-To: mayday@fedjobs.gov
Subject: USAJOBS Security Notice
To: Backstop@...

================================================== ======
USAJOBS
"Working for America"
USAJOBS is the official job site of the United States
Federal Government. It's your one-step source for Federal
jobs and employment information.
================================================== ======

8/30/2007

Dear USAJOBS User,
Recently, malicious software, known as
Infostealer.Monstres, was used to gain unauthorized access
to the Monster.com resume database to steal the contact
information of job seekers. Monster Worldwide is the
technology provider for the USAJOBS website and
regrettably, some of the contact information captured came
from USAJOBS job seekers.

The information captured included name, address, telephone
number, and email address. Monster Worldwide has assured
the U.S. Office of Personnel Management that Social
Security Numbers were NOT compromised because of IT
security shields USAJOBS has in place.

Access to the data was obtained through the use of a
private sector Monster customer's computer using
legitimate employer credentials. OPM is working closely
with Monster to quickly protect the USAJOBS data. Monster
Worldwide already has identified and shut down a rogue
server that was accessing and collecting the job seeker
contact information. Further safeguards are being put
into place.

We ask you to remain alert for counterfeit "phishing"
emails that may appear to come from Monster.com asking you
to click on a link. USAJOBS will NEVER request personal
information via unsolicited email (i.e. not a response to
an email sent by you). Monster has also assured us THEY
will NEVER ask any site users to download any software,
"tool" or "access agreement."

Please also be on the alert for fraudulent email that
advertises positions managing financial transactions, or
cashing checks. These emails are attempting to engage job
seekers in a money laundering or bad check scam.

If you receive a suspicious email regarding your USAJOBS
search, email it, with the full "header" information
intact, to us at: mayday@fedjobs.gov. Instructions on
obtaining header information can be found at:
http://e0.monster.com/emessageRMS/se...2FDA80BA565411
"Phishing" and Internet fraud is an issue that, from time
to time, can affect any Internet user or business. We
remain committed to safeguarding the integrity of the
information provided by job seekers. If you have any
questions, please contact mayday@fedjobs.gov.

Sincerely,

Steve Connelly
Program Director, USAJOBS

================================================== ======
USAJOBS respects your online time and privacy. This is a
service-related email to notify you of important account
information.

Questions? Email us directly by visiting
http://www.usajobs.gov/jsfeedback.asp. Please do not reply
to this email.

To read the USAJOBS Privacy Commitment, visit
http://www.usajobs.gov/privacy.asp
----- End forwarded message -----

**Aplomb** · September 1st, 2007, 00:43

Oh, geeze, Backstop, you know, I've been living on those sites for 2 months!
Thanks for the heads up, anyway.

**Backstop** · September 1st, 2007, 02:35

Bummer, Aplomb.

I thought the Internet was safe?

Is the rhetorical sadness coming through...

**Aplomb** · September 1st, 2007, 12:13

Thanks for feeling it, Backstop. What happens when you hit the link? Is everything else fine if you don't hit the link? I mean, it's monster with the resumes on it, all of my info is there available anyway.

**Backstop** · September 1st, 2007, 13:12

Not sure what you mean by "hit the link"

Site still works OK.

I just left everything (personal info) there in resume(s). Figured what's done is done.

I was listening to the radio earlier, and hear a small snip that a computer with COMPLETE veteran info - SSAN, VA disability numbers, med probs, etc was stolen. I'll have to research that later.

I should add that later this weekend, will send an email (how safe is that...HA!) to USAJOBS and ask some questions.

**Aplomb** · September 1st, 2007, 18:06

This:

We ask you to remain alert for counterfeit "phishing"
emails that may appear to come from Monster.com asking you
to click on a link.

Like you, all my info is there already for the employers to take, so I don't get what worse can happen other than some people you don't want to have your info getting your info--which happens anyway since they can and do pull it from monster.com. I am pretty sure my social security number isn't on any sites for any reason.