H R Solutions

Recruitment service collecting personal data and passwords insecurely

http://www.hr.je/create-an-account.html

What is the problem?

HR company website offering registration via an unencrypted connection. Account password, personal details, contact info, and passwords are all sent unprotected in clear text.

Disclosure Policy

Prior to public disclosure, notification about any privacy or security issues discovered were sent by email to the operator of this website on 22nd June 2015, using either an email address publicly discoverable on the site, or the RFC 2142 standards compliant address "webmaster@..." if no public email address was provided.

At time of posting the issue had not yet been resolved.