Feeds

Orange overshares in bcc blunder

300 email addresses accidentally meet

High performance access to file storage

Orange accidentally shared the email addresses of more than 300 customers yesterday during a bid to find out what they think of the company.

The email, passed on to us by several readers, suggests the recipient might like to reply with their thoughts about how customers keep in touch with the operator, along with any suggestions about how the service could be improved.

Teaching staff the value of the BCC field might be a good start.

Apparently Orange is "intending to update and modify the 'Contact Us' section of the Orange website" and thus mailed everyone who'd recently used the page to get feedback on their experience. But, critically, it failed to hide the email addresses to which the message was sent.

Orange tells us that it's aware of the problem and is "looking at this as a matter of urgency".

Not that Orange is alone in hitting the wrong button: last June 416 Vodafone customers had the same thing happen to them, though Voda's customers were more vocal in their responses, which created a storm of messages as they all hit "reply to all". But the original message had been an apology from the operator rather than a request for feedback.

Given that most people using the feedback page are complaining, they are unlikely to be impressed by having their email address shared with everyone else. We did consider mailing them all to ask their views on this, but on reflection decided... no. ®

SANS - Survey on application security programs

More from The Register

next story
Virgin Media so, so SORRY for turning spam fire-hose on its punters
Hundreds of emails flood inboxes thanks to gaffe
A black box for your SUITCASE: Now your lost luggage can phone home – quite literally
Breakfast in London, lunch in NYC, and your clothes in Peru
AT&T dangles gigabit broadband plans over 100 US cities
So soon after a mulled Google Fiber expansion, fancy that
AT&T threatens to pull out of FCC wireless auctions over purchase limits
Company wants ability to buy more spectrum space in auction
Google looks to LTE and Wi-Fi to help it lube YouTube tubes
Bandwidth hogger needs tube embiggenment if it's to succeed
Turnbull gave NBN Co NO RULES to plan blackspot upgrades
NBN Co faces huge future Telstra bills and reduces fibre footprint
NBN Co plans fibre-to-the-basement blitz to beat cherry-pickers
Heading off at the pass operation given same priority as blackspot fixing
NBN Co in 'broadband kit we tested worked' STUNNER
Announcement of VDSL trial is not proof of concept for fibre-to-the-node
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.