InfoSecBulletin Cybersecurity for mankind
Thousands of Americans’ personal job-seeking details were publicly exposed because of an unsecured database linked to the House Democrats’ Official Online Resume Bank, DomeWatch.us.
The security lapse was brought to light by the research firm Safety Detectives, after an anonymous cybersecurity researcher reported to them about an “unencrypted and non-password-protected database,” containing over 7,000 records of applicants.
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwideÂ
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
The breach, revealed on October 27, 2025, showed a concerning amount of data on people applying for jobs, internships, or fellowships with Democratic Members’ offices and committees.
The leaked data contains Personally Identifiable Information (PII) such as names, phone numbers, email addresses, and security clearance details, raising the risk of fraud and targeted attacks. Additional investigation showed it also included applicants’ political party affiliation, home state, military service, and congressional experience.
The database included 469 people with “top secret” federal security clearance. Political analysis revealed that 6,300 individuals identified as Democrats, while only 17 were Republicans and 265 chose Independent or Other.
The exposed data included weblinks to Google forms and shared documents. Most records had timestamps from 2024–2025, which is confusing since the DomeWatch website says resumes are kept only for 90 days before archiving.
According to Safety Detective’s blog, the team notified the domain’s registration and technical contacts about data exposure, and access to the database was restricted the same day. The contacts responded simply, “Thanks for flagging.”
This exposure is a significant risk. Many of those affected have military or government backgrounds, making them potential targets for criminals using their information for impersonation or targeted phishing scams.
Discover more
Ethical hacking books
Network security audit
ransomware
Ransomware
Information security consulting
Ethical hacking tools
Privacy protection services
Artificial Intelligence
It’s important to check for job offers or messages if you think your personal information might be at risk.
