Public Google Groups Leaking Sensitive Data at Thousands of Orgs

The exposed information includes accounts payable and invoice data, customer support emails, password-recovery mails, links to employee manuals, staffing schedules and other internal resources. Continue reading Public Google Groups Leaking Sensitive Data at Thousands of Orgs

Is Your Google Groups Leaking Data?

Google is reminding organizations to review how much of their Google Groups mailing lists should be public and indexed by Google.com. The notice was prompted in part by a review that KrebsOnSecurity undertook with several researchers who’ve been busy cataloging thousands of companies that are using public Google Groups lists to manage customer support and in some cases sensitive internal communications. Continue reading Is Your Google Groups Leaking Data?

Google Groups misconfiguration leads to sensitive data leaks

If your employees are using Google Groups to discuss issues and ideas, you might want to check whether the sharing setting for these groups is set to “Private”. According to RedLock researchers, many companies fail to do so, most probably by accident, and end up exposing messages containing sensitive information on the internet. By searching for publicly exposed Google Groups within the top 1,000 most visited websites on Alexa, the researchers found hundreds of them, … More Continue reading Google Groups misconfiguration leads to sensitive data leaks