Alleged data breach exposes employee records linked to job recruitment platform Glints

Reports have surfaced indicating that a database containing employee records linked to Glints, an online job recruitment platform in Singapore, has allegedly been leaked on the dark web, raising concerns about data privacy and security.

According to a post on the nuovo BreachForums platform, approximately 1,000 records containing personally identifiable information (PII) of Glints’ employees have been exposed. The leaked data includes sensitive details such as names, employee IDs, designations, email addresses, dates of birth, physical addresses, national ID numbers, and bank account information, adding weight to the claims made by the threat actor.

The impact of this alleged breach extends to Glints Pte Ltd and Glints Singapore Pte Ltd, prompting concerns about potential misuse of the compromised data within the professional services industry, particularly in Singapore.

The post on BreachForums, attributed to the user sedapmalam, provides comprehensive information, including employee IDs, job positions, bank details, and personal contact details, emphasizing the severity of the situation.

Despite attempts to verify the leak’s authenticity, Glints has not issued an official statement or response at the time of writing. While the Glints website remains operational, the absence of immediate indicators of a cyberattack on the front end suggests a potential direct targeting of the organization’s database, bypassing traditional security measures.