Job Boards Revisited 1

(Jan 26, 2009) The Monster database was hacked again. According to a variety of sources (here, here and here), Monster.com posted the warning about the breach on Friday morning and does not plan to send e-mails to users about the issue. The same attacks affected the USA.gov job board as well. (Monster operates the USA.gov job boiard)

Victims of previous attacks on the Monster user-base were subject to email scams by organised criminal gangs, which  prompted them to follow links leading to malicious software, and some were even offered ‘jobs’ which involved nefarious international money transfers. (StartupEarth)

Monster’s response was to post a press release on their site. A spokesperson said that they did not intend to notify users by email. In other words, if your data was stolen, they are not going to tell you. Instead, the press release is supposed to serve as a warning to job seekers.

In order to help assure the security of your information, you may soon be required to change your password upon logging onto the site. Please follow the instructions on the site. We would also recommend you proactively change your password yourself as an added precaution.  We regret any inconvenience this may cause you, but feel it is important that you take these preventative measures.

They did not bother to notify people whose data was compromised. Instead, they ridiculously suggested that

Monster believes that by reaching out to job seekers, the company can help users better defend themselves against similar attacks.

Huh? “Here’s how to approach the problem but we won’t tell you whether or not you have it.” It’s as if the users were hacked and not the Monster database. The whole thiong reeks of a failure to be responsible or to take responsibility.

Next: Comscore Results Show Amazing Growth and Shakeup

I’m on Twitter, Facebook, LinkedIn and Friendfeed. Catch up with me.