2025 Naukri (Info Edge) — mobile API flaw exposed recruiter email addresses to profile viewers
Data compromised
Recruiter corporate email addresses per disclosure narratives
Technical writeup
May 2025 reporting described a mobile API bug in Naukri Android/iOS apps that let users retrieving candidate profiles see recruiter email addresses without authorization; Info Edge was cited confirming remediation and stating misuse was not observed in contemporaneous coverage.
Root cause
Insecure API authorization / insufficient scoping on mobile endpoints