Staffing firm OneHalf exposed hundreds of employee records in a public GitHub according to security software vendor UpGuard, iTnews reports. A member of UpGuard’s Cyber Risk Team discovered the breach Aug. 9, and while it was reported multiple times, the database was made secure Aug. 22 without comment from OneHalf. The employee found the database had been created and left unsecured since early 2018, alleging that basic security practices went ignored. Compromised information included employee entries with 30 fields of data, including medical history and diagnoses.
Full Story