Yes, we usually write about ECM and Regulatory Affairs, Documentum, Interwoven, Alfresco, SharePoint, eCTDs and the like, but every once in a while, we have to write about job search "how-tos" , especially when HOW you go about it can put your credit and your security at stake. 

Why do I say that? Because in the past few months job-seeker data has been compromised on both Monster.com and CareerBuilder.com. 

What are we talking about? 

(From Computerworld)

August 27, 2007 (Computerworld) -- Attackers using a Trojan horse stole more than 1.6 million records belonging to users of Monster Worldwide Inc.'s online job search service, the company acknowledged last week.

The malicious program, called Infostealer.Monstres, utilized the pilfered data to send Monster.com users phishing e-mails that plant malware on their machines, said researchers at Symantec Corp.

The stolen records include the names, e-mail addresses, home addresses, phone numbers and resume identification numbers of 1.3 million users of Monster's services, said Amado Hidalgo, senior security response manager at Symantec.

(From the Boston Globe)

State says broker took leads from job boards

By Ross Kerber, Globe Staff  |  September 13, 2007

Morgan Stanley employees mined the CareerBuilder.com website for personal data such as phone numbers to make cold calls pitching financial products, Massachusetts Secretary of State William F. Galvin alleged in a complaint filed yesterday.

The charges were described in an administrative action against the New York financial-services firm and three of its Boston employees, including a supervisor who allegedly gave a financial adviser a company password to the site meant to match job-seekers and employers.

And that's not all. Someone attempted to steal our candidate's data (Thank heavens we included our own and NOT our candidate's personal data) from an Investment Bank's portal. We were assured that it was a secure. 

What to do? If you send your resume out, know who you are sending it to. E-mail
it, don't post into a portal. And pick up the phone, make a call, speak directly to the
person you're entrusting your personal information to! It could mean a lot more than a job.