Second time this Summer we write about Elance , a service that allows for companies and individuals to hire and pay independent professionals and contractors online, and once again it’s not good news but another security issue . A registered user of the service, Salma Jafri , tells us she has been receiving dozens of private messages that were erroneously sent to her account, on occasion even containing confidential information and sensitive data such as login details for Elance accounts and third-party servers. The company has been alerted to the problem by members since the security breach became apparent a couple of hours ago, but Elance has apparently not dealt with it yet nor responded to any inquiries, says Jafri and numerous others in the website forums . We’ve contacted the Mountain View company

as well but haven’t heard back so far. Something’s seriously wrong though. Members are complaining in the forums (screenshots below) that they’ve received over 50 e-mails so far that were not meant for them. Several of them reportedly contain sensitive data from clients, like login details and private information about their accounts and activities. Elance members reading this: you might want to verify what you’ve sent your clients the last few days and change any login credentials you’ve passed on. Who knows who else has been reading along. (Thanks for alerting us, Salma ) Crunch Network : CrunchBoard because it’s time for you to find a new Job2.0 TechCrunch50 Conference 2009 : September 14-15, 2009, San Francisco

Originally posted here:
Security Snafu: Elance Sends Private Messages All Over The Place