Hundreds of Job Applicants’ Data Exposed on Misconfigured Website

Exploit
Misconfiguration
Organization
Texas Right To Life
Industry
Political Rights Organization

An unprotected directory on the anti-choice political action group, Texas Right to Life, exposed the personal information of hundreds of job applicants that were stored on their website. The group’s website was being used to store resumes of over 300 applicants and other files containing names, phone numbers, addresses, and personal employment history.

Due to a bug in the system, the information was left unprotected leaving the door open for bad actors to view and steal the sensitive data. Company officials have since stated they are “taking action to protect the concerned individuals,” and it appears that the company has already fixed the bug in the website that led to the site being not properly protected.

Sources