About this episode

This episode discusses how a hiring exercise turned into an information security incident due to poorly sanitized data and assumptions about anonymity.

It was supposed to be a routine hiring exercise. A candidate receives a technical assignment, reviews the provided material, and prepares a solution. Then someone notices that the "anonymous" dataset isn't anonymous at all. What follows is an uncomfortable discovery involving confidential business information, questions about data handling, and an unexpected conversation with legal. In this episode of IT Horror Stories with Jack Smith, we discuss how good intentions, poorly sanitized data, and assumptions about anonymity can quickly transform a recruitment exercise into an information security incident. Along the way, we explore data governance, confidentiality, risk management, and what organizations should do when they discover they've shared information they never intended to expose. Want even more info ? Read our show notes and related blog post related to this episode : https://blog.ithorrorstories.eu/gdpr-enters-the-chat/ 00:00 Introduction 02:18 Security Breach 03:25 Social Engineering Risk 10:54 Company Response 12:46 Final Thoughts

People in this episode

Host: Jack Smith

Topics covered

• data governance
• information security
• confidentiality
• risk management
• data handling

Keywords

• GDPR
• data breach
• hiring exercise
• confidential information
• data privacy

Mentioned in this episode

Organizations: GDPR, legal

More episodes of IT Horror Stories with Jack Smith

• One Network to Rule Them All - How a Missing VLAN Strategy Turned Smart City Infrastructure into a Cybersecurity Nightmare · July 20, 2026 · 38 min
• Jack's Rants - Can I Keep Your ID? - Privacy, Identity Theft, Data Minimization, and Why Your Driver's License Is Not a Bar Tab Deposit · July 13, 2026 · 10 min
• Cardboard Confidential - A Cybersecurity Incident, a Golf Course Conversation, and Why No Industry Is Too Boring to Be Targeted · July 6, 2026 · 32 min
• Jack's Rants - The New Change Management - ITIL Change Control, Organizational Change, and Why Project Managers Suddenly Need Psychology Degrees · June 22, 2026 · 13 min
• Spooling Out of Control - Enterprise Printing Explained and Why Printing Still Breaks IT · June 1, 2026 · 27 min
• Sleep Mode in Production - How a Laptop Took Down a Warehouse · May 18, 2026 · 23 min

Explore listener stats, chart rankings, contacts and more on the IT Horror Stories with Jack Smith podcast page.