Switch Data Breach (2024)

On October 1, 2024, the Hungarian IT recruitment firm Switch appeared in a fresh breach listing after inadvertently exposing approximately 5,000 customer records through a publicly accessible GitHub repository. The data, drawn from job applications, includes names, email addresses, social media profiles, and in some instances recruiter commentary about the applicants. Anyone who applied for technology roles through Switch in recent years may now find their personal details circulating beyond the company’s control.

Reported Details from the Disclosure

The primary record on Have I Been Pwned states that the exposure occurred via an unsecured GitHub repository containing thousands of job-application files. The listing confirms that the compromised information consists of names, email addresses, social media profiles, and occasional internal notes written by recruiters. The disclosure does not specify the exact time frame during which the repository remained public, nor does it confirm whether the data was downloaded by third parties before discovery. Switch has not published a detailed customer notification quantifying the precise number of affected individuals beyond the roughly 5,000 records referenced in the breach index.

Why This Matters for You and Your Family

When a recruitment service leaks job-application data, the consequences reach beyond professional embarrassment. Your name linked to an email address and social-media handles creates an immediate map that attackers can use to target you or members of your household. If you applied for roles at Hungarian IT companies through Switch, that record may now sit in multiple unauthorized copies. Children or partners who share your email domain or household address can quickly become part of the same exposure chain. The breach is officially rated low severity, yet the combination of personal identifiers and recruiter commentary makes the dataset unusually useful for spear-phishing and identity theft.

Doxxing and Identity-Chain Implications

Recruitment data is especially dangerous because it often contains both professional and personal context in one place. An attacker who obtains your name, email, and LinkedIn or Facebook profile can correlate those details with other leaks to build a complete picture of your life. This is precisely how doxxing chains begin: one exposed email leads to password resets on other services, which leads to account takeovers, which leads to further personal documents. Gaming accounts belonging to you or your children are particularly vulnerable because the same email address is frequently reused for Steam, Discord, or Roblox logins. Once an attacker controls one account, they can harvest additional details that loop back to your real-world identity.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate the password used on any Switch-related account anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle ongoing takedown requests across data-broker sites and leak repositories on your behalf.

The Switch incident illustrates how even a single misconfigured repository can turn routine job-seeking data into long-term personal risk. Staying ahead requires more than one-time checks; it demands continuous visibility and expert help when new exposures appear. DoxxScan by GalaxyWarden delivers that combination through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.