When does using CC in an email become a privacy breach?

by | Aug 20, 2023 | News, Security

Sometimes you need to use the BCC (Blind carbon copy) function in email!

Last month, the email addresses of 147 gun owners were shared in an email. Whoever was sending the email put everyone in the ‘cc’ line.

That meant their email addresses could be read by anyone who received the email or anyone they forwarded it to.

We’ve all been there. Everyone will have either done this in error and included a huge group in the ‘cc’ line of the email, or they have accidentally replied to all, and had every ‘out of office’ reply and bad address bounce back. At the very least, we’ve all seen these emails.

What is new is to see this described as a serious privacy breach by the Privacy Commissioner, in a more serious stance towards cybercrime. Privacy Commissioner Michael Webster said it wasn’t until the following day that his office was formally notified. This [breach] is frustrating, given the significant known risk of email address errors and the opportunity the new authority had to design in-system guardrails,” Webster said.

In this case, anyone receiving the email now has the email address of other gun owners, and they could theoretically use that for, well, anything.  

For small groups, at work, who know each other, ‘cc’ makes sense.   But for larger groups in the public sphere, please think very carefully before hitting send.  (Outlook even warns you).  Use ‘BCC’ or an email tool that individualises the messages.

Refer – ‘Stuff’ Article