Morgan & Morgan is Investigating the TalentHook Data Breach That May Have Exposed Over 26 Million Resumes

Morgan & Morgan’s data privacy attorneys are investigating TalentHook, a resume sourcing and recruiting platform, following reports of a massive data breach. The incident, first disclosed in July 2025, may have exposed the resumes and personal data of more than 26 million individuals globally.  If you received a notification letter, ACT NOW.

We are investigating, among other things, the following:

• how TalentHook acquired and stored users’ sensitive information;
• whether TalentHook should have retained this volume of personal data;
• whether the resume data was encrypted or stored securely;
• whether TalentHook maintained sufficient cybersecurity protocols to prevent unauthorized access;
• whether TalentHook adequately notified affected individuals and offered sufficient protection after the breach.
   

According to recent reports, a misconfigured cloud dataset containing over 26 million resumes sourced from TalentHook was discovered as being publicly accessible. The exposed data may include full names, email addresses, phone numbers, educational history, professional details, and employment history—potentially putting job seekers at increased risk of identity theft, scams, and fraud. 

TalentHook is used by staffing recruiters across the U.S. and internationally to streamline resume sourcing and hiring. Despite the massive scale of the leak, the company has not publicly commented on the incident or confirmed whether affected individuals will be directly notified.

If you believe your information may have been compromised in the TalentHook breach—or if you’ve received suspicious outreach connected to your job search—Morgan & Morgan may be able to help.

We place a significant amount of trust in the tools we use to build our careers. When that trust is broken, you deserve answers and support. Contact our data privacy team today for a free case evaluation.