Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All
Security researcher Cory Solovewicz owns the 'noreply' domains, which inadvertently receive hundreds of thousands of misdirected emails containing sensitive corporate and personal data. He is now working to alert organizations to these configuration errors.
Why it matters
It exposes a widespread cybersecurity vulnerability where automated systems leak private information due to poor email configuration practices.
Cory Solovewicz receives more unwanted emails than you. Seriously—it’s a lot more. Since December 2024, one of the domains at which the security researcher receives email has registered 401,796 messages—by his calculations that’s an average of 699.99 pings per day.
This deluge isn’t the regular flood of spam, newsletters, and unwanted deals that fill many people’s inboxes. Instead, companies and other organizations are inadvertently sending Solovewicz other people’s private information and company secrets. Over the last few years, he’s received injury reports from a city government, confirmation of people’s pizza orders, and account setup emails from a school platform. “I get service orders for people that need repairs. I get lots of test platform credentials,” says Solovewicz, a security researcher and consultant.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in