- Cybernews researchers discover a data leak belonging to Valley News Live
- An unprotected data set with 1.8 million recordings was discovered
- The data mainly affects the candidates for the company
An unprotected data set was discovered online containing 1.8 million files, including more than a million CV.
The set of data has been discovered by Cybernews researchers, who suspect that the data come from the Jobs portal in Valley News Live, which attracts up to 250,000 monthly visitors.
The researchers confirmed that the personally identifiable information (PII) exposed contained complete names, telephone numbers, email addresses, personal addresses, links on social networks as well as history and education history .
Risk candidates
Valley News Live is a television station based in Fargo, in Northern Dakota, and belongs to Gray Media, a large conglomerate which owns or operates 180 stations across the United States on 113 markets – and is the third largest diffuser in the United States.
Anyone who recently discussed his CV can probably understand how much the danger could put a victim, because the quantity of PII required to build them could easily put someone in social engineering attacks or identity theft.
The researchers warned that many CVs discovered lasted for many years, covering a period between 2017 and 2024, which describes how at risk are.
The data set was discovered online on August 31, 2024 and the notice of initial disclosure was sent to the company on September 17, 2024.
“The data on display include very sensitive personal identifiers, creating many attack vectors for cybercriminals, where personal information can be used to create synthetic identities or fraudulent accounts,” said researchers.
Anyone who has applied for a job in the company or who believes that it could be in danger of this leak or any leak should be vigilant in monitoring their cards and should be very careful when receiving unexpected communications.
For companies, our complete advice on what to do after a data violation can be found here.
