I am about to have a telephone interview for a junior software developer position. When learning more about the company I have noticed that their website has been compromised or, simply put, hacked (the hacker left an unambiguous signature).
It is not necessarily obvious that the security breach has occurred - there is no flashing red banner "hacked" that you cannot miss - but after using the website you cannot really miss that (some of the links lead to the hacker's signature).
I do not know if I should mention it during the interview. My fear is that if I do not, then they might think that I did not really look at their website or if I looked I have a poor perception of what is going on.
If it is a good idea to mention it, how should I do it? If I just say something like "I know that your website has been compromised", I fear that the situation might be awkward, they might be like "Yes, so what now?", they might have an impression that I am just babbling random things to impress them.
Lastly, is it a bad sign that they have been hacked and perhaps should I reject a job if I am offered it? I would expect that security breaches happen and you cannot make a sound judgement based on this fact alone. I would believe it is more about how they approach the reality of being hacked. So perhaps I should ask about their policy? But is it not improper?
As for the company and the job profile: they are both pretty much full-stack.
Also, to add more considerations, there is a problem of company-public benefit. Not informing them might pose a certain market risk to them, on the other hand perhaps public should see with their own eyes that they cannot secure their website?