Glassdoor Faces 172-Hour Ransomware Ultimatum Over Alleged Data Theft 

Leave a Comment / Cybersecurity, Data Protection, Enterprise Technology, Industry News / By cxojunction 

Glassdoor has allegedly been targeted by the Gentlemen ransomware gang, which has launched a 172-hour countdown threatening to publish stolen data. 

The ransomware group listed the employment and workplace review platform on its leak site, claiming it breached the company and exfiltrated information. However, no data samples have been released, leaving the scale and nature of the alleged breach unclear. It is also unknown whether the claimed data includes internal corporate information, employee records, job seeker information, or a combination of these datasets. The platform has up to 67 million unique monthly visitors, reviews covering more than 2 million companies, and millions of active job listings. 

The potential exposure is significant because the platform aggregates information about companies and their workers. Researchers warn that attackers could use this information for reconnaissance, identifying organizations hiring roles, or undergoing workforce changes. Security-related job postings could be especially valuable, as sudden hiring for incident responders, forensics analysts, cybersecurity professionals, cloud engineers, or security operations roles may provide clues about an organization’s internal situation.

If personal information such as contact details is present in the alleged dataset, attackers could use job seeker information and application details to craft convincing phishing and social engineering campaigns. Corporate email addresses and information about employee account structures could enable targeted attacks against workers. Email patterns could also support mass social engineering campaigns aimed at specific companies, while the alleged data could be cross-referenced with information from previous breaches to uncover sensitive details, including potentially compromised employee credentials. 

For organizations, the incident highlights how information held by third-party employment platforms can become valuable intelligence for cybercriminals. Companies should assess what organizational and employee information is publicly exposed, monitor job postings and other public signals that could reveal sensitive operational changes, and strengthen phishing-resistant authentication. Regular third-party security reviews, employee awareness against targeted social engineering, and monitoring leaked credentials can also help reduce the risk of attackers combining employment data with information from previous breaches.  

CXO Junction remains dedicated to providing you with exclusive insights into transformative leadership journeys. Stay tuned for more updates as we continue to bring industry news to you. 

Source: Hackers give Glassdoor 172 hours to stop dump of allegedly sensitive data 

 | Cybernews | https://cybernews.com/security/glassdoor-data-breach-ransomware-attack/