InfoSecBulletin Cybersecurity for mankind
Thousands of Americans’ personal job-seeking details were publicly exposed because of an unsecured database linked to the House Democrats’ Official Online Resume Bank, DomeWatch.us.
The security lapse was brought to light by the research firm Safety Detectives, after an anonymous cybersecurity researcher reported to them about an “unencrypted and non-password-protected database,” containing over 7,000 records of applicants.
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
The breach, revealed on October 27, 2025, showed a concerning amount of data on people applying for jobs, internships, or fellowships with Democratic Members’ offices and committees.
The leaked data contains Personally Identifiable Information (PII) such as names, phone numbers, email addresses, and security clearance details, raising the risk of fraud and targeted attacks. Additional investigation showed it also included applicants’ political party affiliation, home state, military service, and congressional experience.
The database included 469 people with “top secret” federal security clearance. Political analysis revealed that 6,300 individuals identified as Democrats, while only 17 were Republicans and 265 chose Independent or Other.
The exposed data included weblinks to Google forms and shared documents. Most records had timestamps from 2024–2025, which is confusing since the DomeWatch website says resumes are kept only for 90 days before archiving.
According to Safety Detective’s blog, the team notified the domain’s registration and technical contacts about data exposure, and access to the database was restricted the same day. The contacts responded simply, “Thanks for flagging.”
This exposure is a significant risk. Many of those affected have military or government backgrounds, making them potential targets for criminals using their information for impersonation or targeted phishing scams.
Discover more
Ethical hacking books
Network security audit
ransomware
Ransomware
Information security consulting
Ethical hacking tools
Privacy protection services
Artificial Intelligence
It’s important to check for job offers or messages if you think your personal information might be at risk.
