P2021-ND-019

Victoria?s Secret Store Brand Management, LLC

The Organization has a job profile builder that members can used to create a job profile. Between June 2018 and June 2019, job seekers could either request that a PDF of their job profile be sent by email to themselves or to a potential employer. This is done using a link sent to the job seeker or the potential employer from which a PDF can be downloaded. During the process for sending the email, the job profile was indexed by the Organization’s search crawler making it available in site searches. However, this also meant that if an individual?s name was typed into the search bar on the Organization’s site or into a search engine that did not respect the Organization’s search engine crawler instructions (Google, Bing and Yahoo abide by the rules), the job profile could have been viewed. The Organization confirmed no job profiles were downloaded by outside persons or sites. The incident was discovered on June 11, 2019.

File Type: pdf
Categories: 2021
Tags: Unauthorized access