German recruiter Pflegia leaks sensitive job seeker info

Pflegia,
a
German
healthcare
recruitment
platform,
has
exposed
hundreds
of
thousands
of
files
with
sensitive
user
data
such
as
names,
home
addresses,
and
emails.

Scouting
for
a
new
career
can
be
stressful.
Now
imagine
that,
instead
of
a
new
role,
you
find
that
your
resume
data
was
exposed.
That’s
what
job
seekers
using
Pflegia’s
services
are
dealing
with.

The
Cybernews
research
team
discovered
an
open
Amazon
Web
Services
(AWS)
cloud
instance,
often
referred
to
as
a
“bucket”
in
the
business,
with
over
360,000
files.
The
team
deduced
that
the
exposed
files
belonged
to
Pflegia.

Pflegia
is
a
German
recruitment
platform
that
hires
healthcare
professionals
for
hospitals,
nursing
homes,
outpatient
services,
and
intensive
care.

We’ve
reached
out
to
Pflegia
to
disclose
the
issue.
While
the
company
did
not
reply,
the
exposed
server
was
quickly
closed
to
the
public.
We
contacted
the
company
for
comment
but
have
not
received
a
reply
before
publishing
this
article.

What
kind
of
Pflegia
user
data
was
exposed?

The
exposed
AWS
bucket
held
hundreds
of
thousands
of
files
with
sensitive
information.
Most
of
the
files
were
user-submitted
resumes
with
details
such
as:

• Full
  names
• Dates
  of
  birth
• Occupation
  history
• Home
  addresses
• Phone
  numbers
• Email
  addresses

If
you
want
to
know
about
potential
risks
resulting
from
data
leak
give
a
look
at
the
original
post
at

https://cybernews.com/security/pflegia-recruiter-data-leak/

About
the
author:

Vilius
Petkauskas,
Senior
Journalist
at
CyberNews

Follow
me
on
Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Secure
Client)

Share
On

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts