PeopleConnect

TruthFinder and Instant Checkmate, two subscription-based background check services owned by PeopleConnect, suffered a data breach affecting over 20 million customers. These services are especially popular with employers in the United States to learn more about job applicants’ experience, education, criminal records, and online conduct by reviewing publicly available information from social media and federal, state, and court records. The stolen data was discovered on a data breach forum and contained two 2.9 GB CSV files consisting of customers’ full names, email addresses, phone numbers, hashed passwords, and password reset tokens. While PeopleConnect is still investigating the breach, users of the company’s background check services should remain vigilant against targeted phishing attacks and other forms of social engineering schemes leveraging the stolen data.