More than 16,000 employees’ and job applicants’ names, identification numbers, contact details, education and work experience may have been accessed.