2026 Zro Global — sta6 forum sale; 55,866 candidate records + interview audio claimed (unverified)
Data compromised
Actor-claimed 55,866 candidate records: names, personal emails, phones, employment histories, full CV text, evaluation scores, automated competency assessments, scoring logic, and full-fidelity interview audio recordings. Unverified until company notice.
Technical writeup
Unverified forum extortion/sale claim — August 13, 2026. Dark Web Informer reported actor sta6 advertising Zro Global’s recruitment database covering hiring threads through August 8, 2026, citing 55,866 candidate records with CV text, internal evaluation scores, automated assessment logic, and interview audio. The actor attributed access to a zero-authentication flaw and indicated a prior unpaid approach to the company. Zro Global had not publicly confirmed the claim at indexing. BreachHistory uses recordsAffected 55866 as the actor-cited candidate count labeled unverified.
Root cause
Forum actor sta6 claims zero-authentication flaw exposed complete recruitment pipeline through Aug 8, 2026