This highlights how HR and applicant systems, often less defended than operational infrastructure, become entry points to highly sensitive personnel data through lateral movement.