I recently pointed out to our corporate security that a data broker has detailed employee records for our entire company including job titles and start dates. Given the nature of our business, that data cache is a roadmap for security compromises. The most likely culprit was scraping from LinkedIn. It isn't always a good idea to put your data out there for others to aggregate.
Some companies supply that information voluntarily. Experian (iirc) even has a product offering that ‘helps employees qualify for loans and demonstrate stable earnings’ if the companies will just only send them payroll history. So it may not have been scraped necessarily, just “shared” in the ordinary course of business.
