InfoSecBulletin Cybersecurity for mankind
Thousands of Americans’ personal job-seeking details were publicly exposed because of an unsecured database linked to the House Democrats’ Official Online Resume Bank, DomeWatch.us.
The security lapse was brought to light by the research firm Safety Detectives, after an anonymous cybersecurity researcher reported to them about an “unencrypted and non-password-protected database,” containing over 7,000 records of applicants.
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
The breach, revealed on October 27, 2025, showed a concerning amount of data on people applying for jobs, internships, or fellowships with Democratic Members’ offices and committees.
The leaked data contains Personally Identifiable Information (PII) such as names, phone numbers, email addresses, and security clearance details, raising the risk of fraud and targeted attacks. Additional investigation showed it also included applicants’ political party affiliation, home state, military service, and congressional experience.
The database included 469 people with “top secret” federal security clearance. Political analysis revealed that 6,300 individuals identified as Democrats, while only 17 were Republicans and 265 chose Independent or Other.
The exposed data included weblinks to Google forms and shared documents. Most records had timestamps from 2024–2025, which is confusing since the DomeWatch website says resumes are kept only for 90 days before archiving.
According to Safety Detective’s blog, the team notified the domain’s registration and technical contacts about data exposure, and access to the database was restricted the same day. The contacts responded simply, “Thanks for flagging.”
This exposure is a significant risk. Many of those affected have military or government backgrounds, making them potential targets for criminals using their information for impersonation or targeted phishing scams.
Discover more
Ethical hacking books
Network security audit
ransomware
Ransomware
Information security consulting
Ethical hacking tools
Privacy protection services
Artificial Intelligence
It’s important to check for job offers or messages if you think your personal information might be at risk.
