Morgan Hunt confirms digital burglary

British recruitment agency Morgan Hunt announced that the personal data of some of their freelancers were seized during a digital burglary.
Confirming the break-in in a letter to its contractors, Morgan Hunt said that a third-party software developer was “improperly storing credentials” in their database.
“We discovered that we were compromised by an unauthorized third party as a result of this, leading to some candidate data being accessed. We immediately took steps to address the issue, including working with external IT cyber-security experts to help investigate, manage and resolve the incident,” the firm added.
Morgan Hunt provides personnel services to clients in the charity education, finance, government, housing, and technology sectors. The info accessed on the database included contractors’ names, contact details, identity documents, proof of address documents — including any bank or building society statement provided—, National Insurance number, and date of birth.
While the company said that its contractors will not be impacted by the attack, Morgan Hunt admitted that some of the information could potentially be used to attempt to commit identity theft or fraud.
“While we believe this risk is low we recommend that you exercise increased vigilance in all matters relating to your personal details,” the recruitment agency concluded.