Are Your Google Groups Leaking Data?
Summary: Researchers at Kenna Security found more than 9,600 organizations with public Google Groups settings and estimate about one-third are leaking sensitive email, including passwords, financial data, and employee names, addresses and emails. Google says Groups are private by default and acknowledges a small number of instances where customers accidentally shared sensitive information through misconfigured privacy settings.
Bottom line: The exposed messages include password recovery threads, GitHub credentials and Salesforce password resets, plus internal documents and staffing schedules that the researchers say could feed spearphishing, account takeover and business email compromise against named Fortune 500 companies, hospitals, universities and government agencies.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026