German healthcare recruitment platform, Pflegia, has experienced a significant data breach, exposing hundreds of thousands of files containing sensitive user information, including names, home addresses, and emails.
This breach has left job seekers who utilized Pflegia’s services concerned about the security of their personal data.
The breach was discovered by the Cybernews research team, who identified an open Amazon Web Services (AWS) cloud instance containing over 360,000 files. It was determined that these files belonged to Pflegia, a platform specializing in recruiting healthcare professionals for various medical facilities.
Efforts were made to contact Pflegia regarding the issue, but the company did not respond. However, the exposed server was promptly closed to the public. Despite attempts to obtain a comment from Pflegia, no response was received at the time of publishing.
The compromised AWS bucket contained a wide range of sensitive user data, predominantly consisting of user-submitted resumes. This information included full names, dates of birth, occupation history, home addresses, phone numbers, and email addresses.
The extent of the breach and potential impact on affected individuals is yet to be fully determined.