Public Google Groups Leaking Sensitive Data at Thousands of Orgs

June 4, 2018


Thousands of organizations out there are leaking some form of sensitive email, according to an analysis, thanks to a widespread misconfiguration in Google Groups.

According to Kenna Security, the afflicted include Fortune 500 companies, hospitals, universities and colleges, newspapers and television stations and U.S. government agencies. Out of just one sample of 9,600 organizations with public Google Groups settings (out of 2.5 million examined domains), the Kenna team found that 31 percent of them (about 3,000) are exposing data. That means that the global footprint of affected organizations could total tens of thousands.

Read More on Threat Post