104 Job Bank said its app system recently detected abnormal access, and an initial internal review found that about 120,000 job-seeker resumes were read without authorization. The company said it immediately blocked the suspicious connections, hired an independent third-party cybersecurity team to conduct digital forensics, and kept sitewide operations running normally.
Company says about 120,000 resumes were accessed without authorization
According to a material disclosure issued by 104, the abnormal activity was detected in its app system. After a preliminary internal review, the company said about 120,000 job application resumes had been accessed without authorization.
The disclosure did not specify which sensitive fields were included in the affected records. It remains unclear whether the accessed data was limited to basic contact information such as names, phone numbers and email addresses, or whether it also covered more sensitive details including education records, work history, autobiographies and identification numbers. 104 said that point will need to be clarified through the third-party forensic investigation.
Reported to authorities and filed with investigators
104 said it has formally reported the incident to the competent authorities and filed a case with the Taipei City field office of the Ministry of Justice Investigation Bureau after cutting off the abnormal connections. The company also said the platform is operating normally.
In a separate member notice, 104 said it has proactively emailed users who may have been affected. It also warned members to stay alert for suspicious calls or messages sent in the name of 104 or recruiting companies.
Users urged to take protective steps
The report said job resumes are high-value targets for dark web markets and fraud groups because they contain dense personal information. If obtained, that data can be used in tailored social engineering scams built around a job seeker’s background and employment preferences.
For users who recently used the 104 app or created a resume on the platform, the report listed three protective steps:
- Watch for phishing emails, text messages or calls that claim to be human resources review notices from well-known companies, overseas high-paying job offers, or alerts saying a 104 account needs to be reverified. Do not click shortened URLs or unofficial links, and do not download unknown files or install APK applications. If a recruiting notice looks suspicious, verify it through the company’s official switchboard or website.
- Change the password for the 104 account immediately. The report recommended a strong password of at least 12 characters that includes uppercase and lowercase letters, numbers and special symbols. If the same or a similar password is used on other important services such as email, online banking or social platforms, those passwords should also be changed.
- Turn on two-factor authentication in account settings. The report said that even if account credentials are exposed, an extra verification step can sharply reduce the chance of unauthorized logins and account tampering.
104 said users with concerns can call its customer service line at (02) 2912-6104 ext. 2, or contact Taiwan’s 165 anti-fraud hotline.