The servers of Tobasco.be and Z-Staffing.org were compromised by a hacker or group of hackers, operating under the name, Rex Mundi, and extracted sensitive information about job seekers with the intention of publishing it online.
In a series of tweets on Wednesday, the hackers announced that they would be releasing the stolen information. The data they obtained has indeed been published on Dpaste.de.
It appears that Rex Mundi, (@rexmundi14), had contacted the administrators of the two websites to request financial compensation for not publishing the information. However, neither administrator paid and of course the information was shared online last Friday. Currently, however, none of the links containing this information are available from the hackers.
The information is extremely sensitive, since registering for an account on job search websites requires the provision of personal data, such as phone number, address, e-mail, National Identity Number (~ SSN), date and place of birth, Tax Identification Number, and Bank account number.
Even more worryingly, all of this data was sent to the database in an unencrypted format, as it did not support a secure SSL connection. Both websites are currently offline for maintenance, an activity that will hopefully make them more secure.
Rex Mundi announced these incidents through their Twitter account, which they appear to have created specifically for this purpose. They are also demanding a ransom of €5,000 / $6,200, to prevent the release of any more of the stolen data.
The purpose of the attacks is purely financial, since after the attack the groups demand a ransom to prevent them from revealing whatever data they have managed to steal.
In June, a similar incident targeted Domino's Pizza in Belgium and France, with over 650,000 customer records, by RexMundi_Anon. €30,000 / $37,400 was demanded in return. However, it is still unclear whether these attacks were carried out by the same individuals.
