Monster.com recently posted a PSA on their site notifying users that their database was illegally accessed and certain contact and account data were taken, “including Monster user IDs and passwords, email addresses, names, phone numbers, and some basic demographic data.” The information accessed does not include resumes. Monster says they initiated an investigation and took corrective steps, and so far, have not detected misuse of the information. The company also says users may soon be required to change your password upon logging onto the site, but when I logged in after reading the bulletin, I was not prompted to change my password in any way. It must also be noted that as a registered user of the site, I was not e-mailed or notified by Monster.com directly about the breach, and only found it doing my normal news-gathering rounds on the web. This is not exactly best business practice for a breach of this nature; it should be noted that Monster has a poor history of waiting before notifying users of its site of security risks. Of course, with an exposed e-mail address at risk, beware of future “phishing” emails; also, avoid using the same passwords across multiple sites as a precaution for this type of breach. Source
