HireClick, a U.S.-based small to mid-sized business recruitment platform, suffered a major data exposure incident due to an unsecured Amazon AWS S3 storage bucket, leading to the inadvertent leak of over 5.7 million files, primarily resumes. The exposed data included full names, phone numbers, home addresses, email addresses, and employment histories of job seekers. Cybersecurity researchers from Cybernews warned that threat actors could exploit this information for phishing, smishing, and vishing attacks—impersonating recruiters or hiring managers to steal banking details, deploy malware, or conduct doxxing. The misconfigured bucket remained unaddressed by HireClick at the time of discovery (late February), amplifying risks of identity theft, financial fraud, and reputational damage. The incident aligns with a rising trend of job-seeker data breaches, with similar exposures reported at platforms like Foh&Boh and beWanted in early 2024. The lack of timely remediation further exacerbates potential long-term consequences for affected individuals and the company’s credibility.