Monster · Breach

Actor claims to sell 1.5 million Monster job seeker records

Oct 27, 2026 · 1 min read

A threat actor on a Russian-language cybercrime forum is selling a database of 1.5 million job seeker records they claim came from Monster, in parts or as a full set. The posted sample includes first names, phone numbers and email addresses. The claim is unverified and Monster has not confirmed any incident; users should watch for fake recruiter and job offer scams.

By HIFY Radar newsroom Updated 10/27/2026 03:54 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor on a Russian-language cybercrime forum claims to hold 1.5 million Monster job seeker records and is selling them in parts or as a full set. The posted sample includes first names, phone numbers and email addresses. Monster has not confirmed any incident and the data's origin is unverified.

Why it matters

If real, the data exposes job seekers to fake recruiter and job offer scams by phone, text and email. Companies recruiting through Monster could see their brand abused in phishing against candidates.

What to do

Warn candidates and staff about unsolicited job messages. Do not share personal or banking details with unverified recruiters. Monitor for an official Monster statement.

For the technical team

Affected: Monster (plataforma de empregos); banco de dados de 1,5 milhão de candidatos a emprego, segundo alegação em fórum subter · Job seekers registered on the Monster platform, per the claim. Sample fields: first names, phone numbers and email addresses.
Exploitation: No exploitation reported. Sale advertised on a Russian-language cybercrime forum, in parts or as a full set, reported by DailyDarkWeb on 2026-10-27. Unverified claim; Monster has not confirmed any incident.
Fix: No fix applicable. No vulnerability or patch involved; Monster has issued no statement.
Vector: No access vector disclosed. This is a claimed database sale originating from the Monster platform, with no details on how the data was obtained.
More details: Dataset origin and freshness are unverified and may include older or compiled data, per DailyDarkWeb. Analysts flag job seekers as prime targets for fake recruiter and job offer scams.