🔒401k Emails Leaked to Random Domains Since Dec
Private data leaking to random domains daily
TL;DR
Since December, over 400k private emails have been sent to a single domain. Companies and orgs are inadvertently sharing sensitive info like orders, injuries, and even CCTV footage.
Since December, one domain has registered an astounding 401,796 messages, mostly automated by company systems. This isn't spam; it's private data from companies and organizations sent to noreply.net or similar domains. The researcher who owns these domains has received everything from pizza orders to CCTV stills from industrial sites in the Middle East. Companies often misconfigure their email systems, sending sensitive info to non-existent or unintended addresses like [companyname]@noreply.net. If you're dealing with email security, this is a critical wake-up call.

Key Points
One domain registered 401,796 messages since December 2024
Average of 699 pings per day from various companies and orgs
Noreply.net received 400k emails over a year and a half
37,255 messages sent to noreply.us since its purchase in 2020
Over 14k 'from' addresses and 6,200 root domains involved
Why It Matters
If you manage email systems or handle sensitive data, this is a big deal. Companies misconfiguring their systems are inadvertently sending private information to random domains. The researcher has seen everything from pizza orders to CCTV footage. This highlights the need for better security practices and monitoring of email configurations.
Frequently Asked Questions
Why does this matter?
If you manage email systems or handle sensitive data, this is a big deal. Companies misconfiguring their systems are inadvertently sending private information to random domains. The researcher has seen everything from pizza orders to CCTV footage. This highlights the need for better security practices and monitoring of email configurations.
What happened?
Since December, over 400k private emails have been sent to a single domain. Companies and orgs are inadvertently sharing sensitive info like orders, injuries, and even CCTV footage.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 2,782 builders reading daily.