Zro Global Hiring Platform Allegedly Breached, 55,866 Candidates Exposed Along With Interview Audio
An actor posting as sta6 is selling what they describe as the complete recruitment pipeline of Zro Global, a Latin American fintech, covering every hiring thread processed by its platform up to 8 August 2026. The dataset is said to hold 55,866 candidate records with full names, personal email addresses, direct phone numbers, employment histories, and complete CV text extracted from uploaded documents. Alongside these are internal evaluation scores and automated competency assessments, the scoring logic and decision thresholds used to advance or reject applicants, and full fidelity audio recordings of candidate interviews. The actor attributes access to a zero authentication flaw. The claim is unverified.
▣Post details
!Allegedly included
- Interview audio recordings
- Full names
- Personal email addresses
- Direct phone numbers
- Employment histories
- Full CV text
- Candidate evaluation scores
- Automated competency assessments
- Hiring decision timelines
- Evaluation prompt logic
- Scoring weightings
- Advance and reject thresholds
- Confidence intervals
- Fallback heuristics
◱Screenshot
⚠Potential impact
The interview audio is the gravest element. A person's voice cannot be reissued, and a full fidelity recording is sufficient to produce convincing synthetic speech, which matters especially where voice is used to authenticate customers by telephone. Candidates supplied those recordings to apply for a job, not to have their voice published. The CV text and employment histories form a complete professional identity, and the evaluation records reveal how each applicant was scored and why they were rejected, which is information they were never shown. Exposure of the underlying scoring logic raises a separate question about fairness and auditability of automated hiring decisions.
iStatus
UnverifiedTwenty five sample records including audio are hosted publicly; Dark Web Informer is not reproducing that location or the contact identifiers. The actor claims to have validated the data against public professional profiles, which is their own assertion. The opening line indicates a prior approach to the company that did not result in payment, placing this among leaks published after a failed extortion. The account is recent with a single post. Nothing has been independently corroborated. The claim is unverified and Zro Global has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
