Tell HN: Google Workspace leaked customer usernames/email addresses

7 points

2 years ago

On or about July 30, 2024, Google Workspace leaked usernames (which double as email addresses) via an attachment contained in an email entitled: > [Action required] Update your admin settings to preserve your Google Currents user profile data

On or about August 12, 2024, Google Operations sent a disclosure[1] to administrators via the Workspace Admin Security Alert Center informing them their data was leaked, but 1) incorrectly stated the information we received was correct, and 2) incorrectly said that Google asked customers who received other customers' data to delete said data. I know these are incorrect because we received another customer's data and we were not asked to delete it.

I'm not going to share my commentary on the leak, but I thought folks here might want to know.

[1] https://imgur.com/a/DhJNlIa