Washington Post Jobs website hacked

Washington Post Jobs
The Post says the hackers obtained user IDs and e-mail addresses, but “no passwords or other personal information was affected.” The paper is pursuing the matter with law enforcement. A letter to customers about the hack is after the jump.

To Our Washington Post Jobs Customers,

I am writing to let you know that an unauthorized third party attacked our Jobs website last week. We quickly identified the attack and were able to shut it down. Although the hackers unfortunately gained access to certain user IDs and e-mail addresses used on our site, all passwords remain secure, and no other personal information (such as resumes or contact information) was impacted by this attack.

The hackers did not access any other parts of washingtonpost.com or Washington Post systems. We are taking this incident very seriously and are pursuing the matter with law enforcement.

We are contacting you because we place a premium on the privacy of our customers, and because we want to be as transparent as possible with you about issues with the Jobs site that may impact you. In this case, you should be aware that you may receive some unsolicited e-mail (spam) as a result of this incident. As a general matter, you should always avoid opening suspicious or unsolicited e-mail, never respond to or click any links in spam, and avoid providing personal or financial information in an e-mail – especially credit card information, bank account information, passwords, and ID numbers. We will never ask you for your password or such sensitive personal information over e-mail.

As a resource, we have posted an online Q&A with additional information about this incident and steps to protect yourself against spam. In addition, the National Cyber Security Alliance and the Federal Trade Commission offer helpful material about staying safe online and avoiding phishing and other spam-related problems.

We will continue to focus on ensuring the security of the information that you provide to us through use of the Jobs website. We sincerely apologize for this incident and appreciate your use of Washington Post Jobs. Should you have any questions, please visit our online Q&A or contact jobseekerhelp@wpost.com.

Sincerely,

Beth Diaz
Director of Digital Product Development

We have made it easy to comment on posts, however we require civility and encourage full names to that end (first initial, last name is OK). Please read our guidelines here before commenting.