Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.
Kenneth F. Belva

When you suspect their data was stolen

I received the following SPAM email yesterday:

Ken,

We worked together while I was at [X Firm]; however, I have recently joined another recruiting firm. I wanted to keep you updated on my new contact information!

I’m now at [Y Firm] where I will continue to recruit for Quantitative and IT positions within the Financial Services Industry. Our areas of specialization will include the following roles at varying levels: Wall Street Application Development, Quantitative Analysts/Modelers, Investment Quantitative Programmers, Business Systems Development, Database Administration, Business/Systems Analysts and Web Application Development.

If you are currently on the job market, please forward me your contact details along with an updated word format copy of your resume.

Currently, there are many quant/analysts and development roles at various hedge funds and investment banks that I’m working on.

I’m happy to continue helping you on your search.

I look forward to hearing from you soon.
Regards,
[Data Stealer?]

I know X Firm because a friend of mine referred me to them long before my current position. From this referral I’ve only worked with a single person at X Firm, the one to whom I was referred. That’s it! And, that’s why I think someone may have walked out with the Roledex. OK, you got me, the database.

It’s the trusted insiders! This is a case in point: I almost guarantee that this “small” recruiting firm did not have the proper application security controls in place. If they did, at most, the person that emailed me would only be able to take his contacts (and my name would not be amongst them).

I forwarded the email to the recruiter who’s data was most likely stolen. He replied with “Thanks”.

And just for the record: no, I’m not looking for a new position.

Popularity: 3%

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*