[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f37jf66uqsow7h":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":36,"seoTitle":37,"seoTitleEn":38,"seoDescription":37,"seoDescriptionEn":39,"logoUrl":40,"isVerified":4,"isSensitive":4,"isSpamList":41,"isMalware":41,"company":42},"68e3266eda11adda4882524f","job-street","JobStreet 2012 Data Breach","jobstreet","jobstreet.com","2012-03-07T00:00:00.000Z","2017-10-30T01:12:14.000Z","2026-07-29T19:06:43.843Z","Verified breach record","https:\u002F\u002Fwww.lowyat.net\u002F2017\u002F145654\u002Fpersonal-data-millions-malaysians-sale-source-breach-still-unknown\u002F",[15,17],"https:\u002F\u002Fwww.jobstreet.com\u002F",3883455,"known",null,"email_identifiers","Critical",[24,25,26,27,28,29,30,31,32,33,34,35],"Dates of birth","Email addresses","Genders","Geographic locations","Government issued IDs","Marital statuses","Names","Nationalities","Passwords","Phone numbers","Physical addresses","Usernames","\u003Cp>\u003Cstrong>The JobStreet 2012 data breach\u003C\u002Fstrong> concerns a large job-seeker dataset attributed to the recruitment service. A verified external breach record reports a March 7, 2012 date and 3,883,455 unique email addresses. The production email-only job processed 3,879,211 lines and created 3,879,157 unique email associations. These values measure separate scopes.\u003C\u002Fp>\n\n\u003Ch2>What sources document the event?\u003C\u002Fh2>\n\u003Cp>Lowyat.NET reported on October 19, 2017 that it had examined several Malaysian datasets offered for sale on its forum. The report said that the file attributed to JobStreet contained almost 17 million rows and showed candidate names, login names, password hashes, emails, nationalities, addresses, and mobile numbers; the data appeared to date from 2012 to 2013 and included people outside Malaysia. As the article's headline stated, the source of the data was unknown at that time.\u003C\u002Fp>\n\u003Cp>A verified breach index later authenticated the attributed corpus at 3,883,455 unique emails and 12 structured data classes and said that the data subsequently became downloadable over Tor. This corpus verification does not mean JobStreet publicly confirmed the incident or that March 7 was the exact day of network access. The date should be read as an event date derived from the records.\u003C\u002Fp>\n\n\u003Ch2>Which data types are in scope?\u003C\u002Fh2>\n\u003Cp>The verified classes are dates of birth, email addresses, genders, geographic locations, government-issued identification numbers, marital statuses, names, nationalities, passwords, phone numbers, physical addresses, and usernames. No field should be assumed to occur for every email record; in particular, the almost-17-million figure reported for the source file is not a unique-person or unique-email count.\u003C\u002Fp>\n\u003Cp>Résumé files, application text, employment history, salaries, bank accounts, and payment cards are not among the current structured classes. Although the record concerns job-seeker data, an email match does not prove a person's occupation, unemployment, application status, nationality, marital status, or that the other fields occurred together on the same row.\u003C\u002Fp>\n\n\u003Ch2>How do 3,883,455, almost 17 million, and 3,879,157 differ?\u003C\u002Fh2>\n\u003Cp>The 3,883,455 value is the number of unique email addresses in the verified external corpus. Almost 17 million is the row measure reported for the source file examined in 2017. The local 3,879,157 value is the number of unique email associations currently indexed after the one-column email import, 4,298 below the external measure. The three values are not added together.\u003C\u002Fp>\n\u003Cp>The local job contains email addresses only. Password, identity, phone, address, and demographic fields verified in the external corpus are not locally stored fields from this production import.\u003C\u002Fp>\n\n\u003Ch2>What steps can people consider?\u003C\u002Fh2>\n\u003Cp>If a password from the 2012 period was reused elsewhere, it can be replaced with a unique password on the relevant accounts. Recruitment messages using an old application, phone number, address, or identity detail should not be trusted on that basis; the employer or JobStreet should be verified through a separate official channel. Identity documents, passwords, and one-time codes should not be supplied through a suspicious link.\u003C\u002Fp>","","JobStreet 2012 Data Breach (3.9 Million Email Identifiers)","The 2012 JobStreet breach contains 3,883,455 verified unique emails. Review 12 data classes, the near-17-million-row report, and local coverage.","\u002Fuploads\u002Flogo\u002Fjobstreet_com.webp",false,{"name":43,"sector":44,"country":45,"website":10,"websiteArchiveUrl":37,"websiteStatus":46,"websiteCheckedAt":47},"JobStreet","Recruitment","Malaysia","active","2026-07-29T18:57:55.000Z"]