eRekrutment Breach Exposed Indonesian Job Seekers in March 2025

HEROIC cataloged the eRekrutment breach on March 15, 2025, after 54,000 rows of personal data from the Indonesian job portal at rekrutmen.cnc.co.id appeared on an underground forum. The dump carried emails, phone numbers, full names, usernames, bcrypt password hashes, and additional contact details, with 164 verified unique records surfacing so far.

Why This Database Breach Is Dangerous

Recruitment databases are a treasure trove for attackers. They hold verified real names, mobile numbers, and home addresses tied to people actively seeking employment, the exact profile social engineers love. Job seekers open attachments, click interview links, and answer calls from unknown numbers, and this leak hands attackers every detail needed to impersonate a recruiter convincingly.

What Was Exposed in the eRekrutment Leak

• Email addresses
• Phone numbers
• First names and last names
• Usernames
• bcrypt password hashes
• Additional personal details from applicant profiles

Why This Matters

Indonesian job seekers face a layered threat. bcrypt hashes, while strong, eventually yield to weak or reused passwords. Combined with phone numbers, criminals can run SMS phishing campaigns posing as eRekrutment or prospective employers, luring victims into fake offer portals that harvest banking details and identity documents.

How a Recruitment Database Breach Happens

Employment platforms often run on aging web stacks with exposed admin panels, injection flaws, or misconfigured database backups. Attackers probe login endpoints, pull full table dumps, and list the files on forums like BreachForums. Because applicants hand over so much data voluntarily, a single compromised platform yields months of fraud material from one exfiltration event.

Check If You Are Affected

If you applied through eRekrutment, change the password there and on any account reusing it, enable two-factor authentication on email and banking accounts, and watch for unexpected recruiter messages. Search the HEROIC scanner, which indexes more than 400 billion breached records, to see whether your email surfaced in the eRekrutment dataset.