Ladders, a U.S. job recruitment website, has endured a security lapse that exposed the profiles of 13.7 million users and the information of 379,000 recruiters, TechCrunch reports. An Amazon-hosted Elasticsearch database, which held years' worth of Ladders data, was running without a password for an unknown period of time before recently being shut down within an hour of Ladders being informed of the lapse. Names, email addresses and employment histories were some of the personal information exposed. “AWS confirms that our AWS Managed Elastic Search is secure, and is only accessible by Ladders employees at indicated IP addresses. We will look into this potential theft, and would appreciate your assistance in doing so,” Ladders Founder and CEO Marc Cenedella said.
Full Story