top of page

InfoJobs cyberattack exposes user data

The famous employment platform InfoJobs, with a prominent presence in Spain, has been the target of a cyberattack that compromised the information of a large part of its users. Although no specific number of people affected has been disclosed, the company confirmed that the criminals managed to access the data using passwords previously stolen from other platforms.


This type of attack, known as credential stuffing, is based on the use of email and password combinations that users often reuse across different services.


Once attackers obtain these credentials from previous breaches, they test them en masse on other platforms, hoping that one will work.

InfoJobs explained that this practice is very common and dangerous, as most users tend to repeat their passwords. While they stressed that the responsibility for using strong passwords lies with the user, they also recognized the need to strengthen their own security measures.

InfoJobs cyberattack

Risks of credential stuffing and how to prevent them


Following the incident, InfoJobs issued key recommendations to its users:


  • Be on the lookout for unusual activity on their accounts.

  • Be wary of job offers that ask for sensitive information such as official IDs, bank details or advance payments.

  • Always verify the authenticity of the sender of emails, especially if they come from supposed recruitment companies.


In addition, the use of unique and secure passwords on each platform was recommended as part of an essential preventive strategy.


Mexico can learn from the InfoJobs cyberattack


Cases like the InfoJobs cyberattack underscore the urgency of improving data protection practices on digital platforms. In Mexico, where more and more people are using online services to search for jobs, this type of incident can serve as an example for companies, users and authorities to strengthen their cybersecurity culture.


This incident is not isolated. It is common for cybercriminals to impersonate well-known brands to obtain information from victims, using social engineering techniques such as generating urgency or intimidation to achieve their goal.

At Cyberpeace, we recommend staying informed about cybersecurity issues and other digital threats. Prevention and knowledge are your best allies to protect your online identity. Interested in learning more about cybersecurity and digital privacy? Follow our networks and stay informed.


Comments


Cyberpeace_Working table 1 copy 8.png

Cyberpeace Copyright © 2025 - All rights reserved.

TLP:WHITE

bottom of page