In 2022, Robert Half reported suspicious login activity targeting 1,058 customer accounts. The company said it had no evidence that account information was accessed or downloaded. The incident report therefore confirms attempted account targeting—not that customers’ personal or financial data was stolen.
What happened to Robert Half customer accounts?
SecurityWeek reported on June 17, 2022, that Robert Half had begun notifying customers about suspicious logins targeting accounts on RobertHalf.com. Information Robert Half provided to the Maine Attorney General indicated that the activity ran from April 26 through May 16, 2022. The company reportedly discovered it on May 31, and 1,058 individuals were affected by the account-targeting activity. Source: SecurityWeek’s account of information provided to Maine’s Attorney General.
Robert Half’s customer notice, quoted by SecurityWeek, stated: “While we do not have evidence that this information was actually accessed or downloaded, in the interest of transparency we wanted to inform you about this incident and provide you with the information in this letter.” Source: the notice excerpt published by SecurityWeek.
Was personal or financial information accessed?
The report does not establish that attackers accessed or downloaded customer data. Robert Half said it had no evidence that they did. That is not the same as proof that access was impossible; it is the company’s stated finding as reported in 2022.
#1 Best Overall
The affected accounts could contain names, addresses, Social Security numbers, wage and tax information, and direct-deposit bank account numbers. SecurityWeek reported that only the last four digits of those bank account numbers were visible. The presence of this information in accounts does not, by itself, show that it was viewed or taken. Source: SecurityWeek’s report quoting Robert Half’s customer notice.
How did Robert Half respond?
According to the customer notice quoted by SecurityWeek, Robert Half required affected users to reset their account passwords and strengthened authentication controls on its website. The notice also advised customers to change passwords on other accounts if they had reused the same credentials. Source: SecurityWeek’s report quoting the notice.
Was this a credential-stuffing attack?
SecurityWeek said the reported activity appeared consistent with credential stuffing: trying username and password combinations exposed in breaches of other services. The publication based that interpretation on the incident description and the advice to change reused passwords. Credential stuffing was not confirmed as the attack method. SecurityWeek also reported that Robert Half had not clarified whether its own systems were breached, so the technical cause and whether any system intrusion occurred remained unresolved in that coverage. Source: SecurityWeek.
What should affected customers do?
- Use a unique password. If you still use the password associated with the Robert Half account, replace it with a new, strong password that you do not use elsewhere.
- Change reused passwords on other services. Prioritize email, financial accounts, and any service where a reused password could enable access to more accounts.
- Watch for suspicious activity. Review relevant financial and email accounts for unfamiliar logins, transactions, or password-reset messages. Contact the provider through its official channels if you see something you do not recognize.
- Be cautious with identity-monitoring claims. SecurityWeek reported a two-year Experian identity-monitoring offer for impacted individuals in its 2022 coverage. That historical report does not establish that the offer is available now. Source: SecurityWeek.
What Robert Half says about its security program
Robert Half’s current security and data privacy page says independent third parties review its security program and controls every year, specialists assess systems used to serve clients and candidates, and an annual audit focuses on controls associated with financial integrity. These are statements about the company’s current program; they do not establish what caused the 2022 activity or change what is known about that incident. Robert Half security and data privacy.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
