Jobzone Breach Exposes 29,708 Israeli Job Seekers’ Personal Data
What Happened — In April 2023, a data set from the Israeli employment portal Jobzone was posted publicly. The leak contains 29,708 records that include email addresses, full names, dates of birth, government‑issued ID numbers, parents’ names, gender, phone numbers and physical addresses.
Why It Matters for Trust & Control Assurance
- Demonstrates the risk of insufficient third‑party data‑handling controls; a continuous vendor‑risk program would have required evidence of encryption, access restrictions and regular audits.
- Provides a concrete incident that must be documented in an audit trail to show due‑diligence and to satisfy control‑monitoring requirements across frameworks.
- Highlights the need for a defensible process to verify that external services meet your organization’s privacy and security obligations before onboarding.
Who Is Affected — Job‑seeking individuals in Israel; employers and recruiters that rely on Jobzone data; any organization that integrates the portal into its hiring workflow.
Recommended Actions
- Initiate a breach‑impact assessment and notify affected individuals per local regulations.
- Review and tighten third‑party risk assessments for any services that handle PII, ensuring documented controls for encryption, access, and monitoring.
- Collect and retain evidence of vendor‑risk reviews, contracts, and security attestations to support audit readiness.
Source: Have I Been Pwned – Jobzone breach
Technical Notes — The data appears to have been exfiltrated and posted without a disclosed exploitation vector; no specific vulnerability or CVE is identified. Exposed data types include government‑issued IDs, dates of birth, and full contact details. Source: same as above