News Crackers steal Monster.com database

http://www.bit-tech.net/news/bits/2009/01/27/crackers-steal-monster-com-database/1

Crackers have successfully made off with a full copy of the user database for job site Monster.com - with all of its users' personal details stored therein.

 

URGENT: Senior Security Engineer required
Excellent rate of pay,
Immediate start,
Apply to: Monster.com

Actually saw this on Slashdot, and although it's the only mention of unencrypted passwords that I can see, if it's true then it's more than likely just absolute stupidity on their behalf.

What's worse is that they're not telling users that their favourite 'used for everything' password is now linked to their 'use for everything e-mail' in some black market database.

 

I'm just happy I use a different password for each site I use now.

I am shocked that they don't encrypt the passwords though, that seems like a complete lack of basic security.

 

CV taken off and personal data changed, thanks for the heads up :S

 

So, is this going to become a tradition at Monster.com? I can see them loosing money on this; who wants to do business with a company that can't provide better information security? They have a poor site anyways and should fire the people that are supposed to be actively monitoring this stuff.

 

With the economy the way it is, I can see the Nare'do wells targeting more of the job sites in the future.