unauthorized access to monster resume database

Like this article? Digg it!

I have my resume on Monster.com - it’s currently not active or searchable, but I never took it off the site after getting my job 3 years ago, figuring that it would be safe and secure. A letter I got from Monster.com this afternoon says otherwise:

Dear Monster Customer:

Recently, a malicious software, known as Infostealer.Monstres, was used to gain unauthorized access to the Monster resume database. Regrettable, some of the contact information that was captured included your name, address, telephone number, and email address.

The letter went on to state that action had been taken to protect data in the future, and that Monster would continue to review all log ins with access to the account to make sure they were being used properly. (I’m certain that’s true, because in my job, I deal with Monster on the employer side, and I’ve been contacted in the past about compromised accounts. Monster regulates accounts for “non human access”, and when they see hundreds of resumes being accessed in a short amount of time, they investigate.)

Monster also asked that users be on the alert for fraudulent emails that appear to be from Monster.com and ask you to:

  • Download software
  • Ask for your banking information, or other account numbers
  • Ask for a payment of any type
  • Ask you to download agreements pertaining to your Monster account or a job

If you receive an email like this, which appears to be from Monster, please forward it, with the full header information intact, to siteabuse@monster.com

Do I feel safe about continuing to use Monster? Sure. My name, email, and address is already out on the internet in various places. You should NEVER put anything you’re not willing to make public, like a social security number, on a resume.

3 Comments so far

  1. Brad Detchevery on August 30th, 2007

    WOW ! Thanks for the notice.

    Do you know if access was gained to passwords as well?

  2. Colleen on August 30th, 2007

    According to the letter I received, only my name, address, phone number, and email were compromised. The users didn’t gain access to the database of monster account information, only the resumes.

  3. "Mommy" on September 1st, 2007

    That’s so strange… I got an email earlier today and was wondering about it. I deleted it before I ever read it, though *phew*

    I also got some really weird YouTube phishing emails last week. Imagine that… What could a phisher possibly gain from my youtube account? lol

Leave a reply