TriNet shares employee PII without controls https://honeypot.net/post/trinet-shares-employee-pii-without-controls/
My employer's HR department asked me to validate a coworker's identification documents and attest that they're legitimate, for government tax form purposes.
I got an email from our payroll vendor, TriNet, with a link to attest to those documents' authenticity. Clicking it took me to a page with scans of my friend's driver's license and Social Security card without [...]
Tek is not a convicted felon /
npub13e…clhjj
2023-08-29 19:51:03
Author Public Key
npub13e30hnrpg768tslwwjveafaazctk7ghf9va2se2k4ygr8cj24veshclhjjPublished at
2023-08-29 19:51:03Event JSON
{
"id": "70f14572978b9b2d067cad9abd23fc0543b548ac0a7769d37c5072169084a89c",
"pubkey": "8e62fbcc6147b475c3ee74999ea7bd16176f22e92b3aa86556a91033e24aab33",
"created_at": 1693338663,
"kind": 1,
"tags": [
[
"proxy",
"https://freeradical.zone/users/tek/statuses/110974642638459766",
"activitypub"
]
],
"content": "TriNet shares employee PII without controls https://honeypot.net/post/trinet-shares-employee-pii-without-controls/\n\nMy employer's HR department asked me to validate a coworker's identification documents and attest that they're legitimate, for government tax form purposes.\nI got an email from our payroll vendor, TriNet, with a link to attest to those documents' authenticity. Clicking it took me to a page with scans of my friend's driver's license and Social Security card without [...]",
"sig": "88b9d0ac201f53b8b2318f80a207e3cf3a48f2600e9c69b7256a74f07e1dd20b8b2c1785c61e7a50adee54586a26874a9110080451d282d6a54708f345cbf9e6"
}