Archive — US — techcrunch
Naukri exposed recruiter email addresses, researcher says
Naukri.com fixed a bug that exposed recruiters' email addresses through its mobile app API, discovered by researcher Lohith Gowda. This issue raised concerns about potential phishing attacks and spam. Naukri confirmed the fix and assured that user data integrity remains intact. The site connects job seekers with recruiters and maintains a presence in international markets as well.
Key points
- A bug in Naukri.com’s API for mobile apps exposed the email addresses of recruiters.
- The exposure was discovered by security researcher Lohith Gowda.
- The issue could lead to targeted phishing attacks and increase spam for recruiters.
- Naukri.com confirmed that the bug was fixed and has implemented enhancements to their system.
- Alok Vij from InfoEdge stated that no unusual activity affecting user data integrity was detected.
- The issue did not affect Naukri’s website, only its mobile applications.
Why it matters
- Naukri.com is a leading recruitment platform in India, which has seen increased cyber threats.
- Rising incidents of data breaches highlight the need for robust security measures in digital platforms.
- Emerging IT trends in 2025 emphasize the importance of cybersecurity, especially in recruitment and HR tech.
The exposure of recruiter email addresses on Naukri.com highlights significant cybersecurity concerns in recruitment platforms, underscoring the need for ongoing vigilance and robust security practices in the face of increasing online threats.