BigMoneyJobs Data Breach

What happened?

In April 2014, the job site bigmoneyjobs.com was hacked by an attacker known as "ProbablyOnion" . The attack resulted in the exposure of over 36,000 user accounts including email addresses, usernames and passwords which were stored in plain text. The attack was allegedly mounted by exploiting a SQL injection vulnerability.

When did it happen?

The breach date in the public record is April 3, 2014. The record was added to the catalogue on April 8, 2014 and last updated there on April 8, 2014.

What information was reported as exposed?

• Career levels
• Education levels
• Email addresses
• Names
• Passwords
• Phone numbers
• Physical addresses
• Salutations
• User website URLs
• Website activity

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with BigMoneyJobs or used bigmoneyjobs.com around April 3, 2014. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.