In colossal screw up, Essential shared customers’ driver’s licenses over email
https://www.theverge.com/2017/8/30/16226028/essential-customer-email-drivers-license-phishing [www.theverge.com]
2017-08-31 03:39
What appears to have happened is that Essential had a list of customers it needed to verify to prevent fraud, so it sent them an email requesting more information. But that email address was set up as a group email, which meant that replies sent to it went to everybody on that email list.
What’s worse than reply all? Invisible automatic reply all.