Security Researcher Uncovers Sensitive Data Leaks in 'No Reply' Emails
Security researcher Cory Solovewicz has discovered a significant issue with 'no reply' email domains, where companies inadvertently send sensitive information. Solovewicz owns the domains noreply.us and noreply.net, which have received over 400,000 emails containing private data and company secrets. These emails include injury reports, service orders, and account setup details. The issue arises because organizations misconfigure their systems, sending emails to these domains under the assumption they are unmonitored. Solovewicz has been alerting affected companies to rectify these errors, emphasizing the potential risk if such data were accessed by malicious actors.