My Future Job Breach: 1,966 Philippine Job Seekers Exposed Online

HEROIC researchers traced a small but targeted leak to My Future Job, a Philippine job search platform, on January 1, 2025. The exposed dataset contains 1,966 records, each consisting of a single email address belonging to a registered job seeker. Despite its modest size, the leak is already circulating across dark web marketplaces and being blended into larger phishing target lists.

Why This My Future Job Database Breach Is Dangerous

Job-board email lists are a premium commodity for phishing operators. Every address in the file belongs to someone actively looking for work, which makes recruitment-themed phishing extraordinarily effective. Attackers build fake recruiter personas, offer bogus job interviews, and walk candidates through elaborate onboarding that ends with credential theft, crypto scams, or fraudulent check-cashing schemes. The smaller the list, the more targeted the attack, and the more likely a job seeker is to act on what feels like a personal outreach.

What Was Exposed in My Future Job

• 1,966 email addresses belonging to Philippine job seekers
• Records confirmed on dark web marketplaces
• Data sourced from a direct database compromise
• Already integrated into broader botnet and spam distribution lists

Why This Matters

Even without passwords, the My Future Job leak fuels credential stuffing against common email providers, account takeover on LinkedIn and payroll platforms, identity theft through fake employment offers, and fraud tied to advance-fee job scams. Attackers routinely cross-reference leaked job-board emails with other breach corpora to locate reused passwords, giving them ready-made pathways into victims' financial and professional accounts.

How Database Breaches Work

Small regional job boards frequently run on older PHP stacks and outdated CMS themes, leaving them exposed to SQL injection, insecure file uploads, and weakly protected admin panels. Once an attacker gains read access to the user table, an entire signup list can be downloaded in seconds. The extracted data ends up on leak forums, Telegram channels, and private Tor-hosted marketplaces, where it is sold cheaply or bundled with other leaks to boost the value of larger phishing packs.

Check If You Are Affected

HEROIC monitors more than 400 billion compromised records across surface web and dark web sources. Run a free scan to check whether your email address surfaced in the My Future Job breach and to see any related leaks that could expose you to recruitment phishing.