job site

MyBRANDS Job Site Unauthorized Access and Possible Personal Data Leak (Up to About 135,000 Accounts): What Job Seekers and Employer Contacts With Names, Contact Details and Work History Should Do

iDA Co., Ltd. (Japan) announced on October 30, 2026 that unauthorized access by a third party to the server environment of its job site MyBRANDS may have leaked outside the information of registered job seekers and employer contacts. It says a cloud access key used by a contractor was misused by a third party on October 21 to 22, and that on October 26 it learned there were records of data being sent outside from a copy of the database. It could not confirm what the sent data contained, so it is notifying on the basis that all information it held is covered. The scope is up to about 135,000 accounts as of October 30, including people who have left the service. The information is name, email address, phone number, profile (such as work history) and login password (stored as a transformed value), and varies by registration. Credit card and bank account information was not held and is not included. Name, email address, phone number and address were stored encrypted, but the key to decrypt them may also have been taken, it says. No misuse (secondary damage) has been confirmed so far. This site's conclusion: change passwords on any other service that shares your MyBRANDS password (employer contacts, also internal systems), and check messages claiming to be a recruiter or scout through an official channel, not through their links or numbers.