According to a member of hacking group TeamGhostShell, recruiting firm ITWallStreet.com has recently had private data belonging to tens of thousands of its users published online. The company supplies Wall Street businesses with IT professionals to work in development, infrastructure and database and process management.
The data was allegedly stolen from its server and contains first and last names, usernames, email and mailing addresses, phone numbers and hashed passwords, many of which were quickly decrypted into their clear text form. Individuals affected ranged from entry-level support staff to top executives, including many vice-president-level jobs at nearly every major Wall Street firm.
It gets worse. ComputerWorld reports that in addition to this personally identifiable information, the data dump included salary and bonus expectations of the candidates as well as snippets of email exchanges which discussed the suitability of certain candidates for certain positions. Details of phone records including the phone number dialed, when it was dialed and how long the call lasted were also part of the exposed information.
ITWallStreet.com has said that they would not comment until the claims were verified, as it was too soon to tell if the data belonged to their applicants or not. It is thought that the attack took place as part of the Occupy Wall Street movement.