Monster.com Data Stolen, Won't Email Users

Posted by Soulskill on Sunday January 25, 2009 @01:56AM from the security-specialist-wanted,-apply-within dept.

chiguy writes "There's been another break-in at Monster.com. It's surprising that there are still unencrypted passwords stored in database despite the previous hack, as is the decision to not email users — presumably so that no one will make a fuss. From PC World: 'Monster.com user IDs and passwords were stolen, along with names, e-mail addresses, birth dates, gender, ethnicity, and in some cases, users' states of residence. The information does not include Social Security numbers, which Monster.com said it doesn't collect, or resumes. Monster.com posted the warning about the breach on Friday morning and does not plan to send e-mails to users about the issue, said Nikki Richardson, a Monster.com spokeswoman. The SANS Internet Storm Center also posted a note about the break-in on Friday.'"

2 of 200 comments (clear)

If only there was somewhere... by Anonymous Coward · 2009-01-25 02:13 · Score: 5, Funny

If only there was some kind of service where you could advertise for a network security guy...
Greetings Monster.com user! by assemblerex · 2009-01-25 02:20 · Score: 5, Funny

I am a nigerian prince who wishes to hire you. I will send you a check for $60,000 to cover your employment of $55,000.
All I ask is that you purchase $5000 in laptops to send back to the parent company here.You can even keep one as your work computer.
As soon as we get the laptops we will send you another check for $100,000 to hire two employees. We only ask the extra $10,000 be sent back to the parent company.