Security Notice from USAJOBS

8/30/2007

Dear USAJOBS User,

Recently, malicious software, known as Infostealer.Monstres, was used to gain unauthorized access to the Monster.com resume database to steal the contact information of job seekers. Monster Worldwide is the technology provider for the USAJOBS website and regrettably, some of the contact information captured came from USAJOBS job seekers.The information captured included name, address, telephone number, and email address. Monster Worldwide has assured the U.S. Office of Personnel Management that Social Security Numbers were NOT compromised because of IT security shields USAJOBS has in place.Access to the data was obtained through the use of a private sector Monster customer's computer using legitimate employer credentials. OPM is working closely with Monster to quickly protect the USAJOBS data. Monster Worldwide already has identified and shut down a rogue server that was accessing and collecting the job seeker contact information. Further safeguards are being put into place.We ask you to remain alert for counterfeit "phishing" emails that may appear to come from Monster.com asking you to click on a link. USAJOBS will NEVER request personal information via unsolicited email (i.e. not a response to an email sent by you). Monster has also assured us THEY will NEVER ask any site users to download any software, "tool" or "access agreement."Please also be on the alert for fraudulent email that advertises positions managing financial transactions, or cashing checks. These emails are attempting to engage job seekers in a money laundering or bad check scam.If you receive a suspicious email regarding your USAJOBS search, email it, with the full "header" information intact, to us at: http://owebmail.bellsouth.net/agent/MobNewMsg?to=mayday@fedjobs.gov. Instructions on obtaining header information can be found at: http://e0.monster.com/emessageRMS/servlet/RMS?v=2&i=21699&t=000069326&ep=t9C337F31779F2CC2&xp=t9C337F31779F2CC2&c=t83DB478BE80B894D824A45D337210422502FDA80BA565411."Phishing" and Internet fraud is an issue that, from time to time, can affect any Internet user or business. We remain committed to safeguarding the integrity of the information provided by job seekers. If you have any questions, please contact mayday@fedjobs.gov.

Sincerely,

Steve Connelly,
Program Director, USAJOBS