Users of Alabama's free online jobs database may have had their personal information exposed during a security breach.
In an announcement today, America's Job Link Alliance - Technical Support said that on March 21, a third party hacker "exploited a vulnerability in the AJL application code" and viewed the names, social security numbers and dates of birth of jobseekers in the systems of 10 states including Alabama.
Arizona, Arkansas, Delaware, Idaho, Illinois, Kansas, Maine, Oklahoma and Vermont were also affected. Users between February 26 and March 14 may have been compromised.
AJLA is a multi-state web-based system that links job applicants with employers, which includes Alabama's online jobs database www.joblink.alabama.gov.
The threat has been contained and the hacker's access to all AJL systems has been disabled, officials said.
The hack could affect anyone who signed up for a JobLink account or utilized its services over the past four years, and includes anyone who has received unemployment insurance benefits. Accounts established after March 14th are not affected.
The Alabama Department of Labor has identified customers with valid social security numbers who may be affected. Officials say those affected who have a valid email address on file will receive an email with instructions.
Information is also available on the following websites: www.joblink.alabama.gov and www.labor.alabama.gov.
Fitzgerald Washington, Secretary of the Alabama Department of Labor, said officials are working "around the clock" to gather information and prevent similar incidents in the future. In addition, a forensic analysis and investigation is proceeding regarding the incident.
Officials say anyone who has been affected by this breach, or thinks they may have been affected, should watch their bank accounts, credit cards and other financial transactions.
The IRS Identity Protection Specialized Unit can also give help at 1-800-908-4490 or visit www.identitytheft.gov/databreach for additional follow-up steps.
A call center should be operational within two to three business days for those affected. Anyone seeking additional information can email www.AJLAincidentresponse@AJLA.net with any additional questions about the incident.