4 ms·
I was caught in an email storm like this one time. Someone at a large insurance company accidentally sent an email containing a few patient names/dobs to a gro
by hitgeek 10y ago
I was caught in an email storm like this one time.
Someone at a large insurance company accidentally sent an email containing a few patient names/dobs to a group-email mailing list of at least 1000+ outside emails.
It took about 2 months before the storm finally ended.
It became comical how many responders to the email chastised the original sender for "HIPAA violations" using Reply-All thereby inadvertently committing the same infraction themselves because the original email was included at the bottom of the reply.
Also, several times, after 2-3 days of quiet, someone would come back from vacation and reply-all with "I think you sent this to the wrong person", thereby starting the storm all over again.
The company of the original sender seemed powerless to stop it, but I always wondered if they could have just disabled/deleted that group-email mailing list.
- SOLAR_FIELDS 10y agoEasy to do if there are no permissions or anything else tied to that AD group - but that is often not the case in these kinds of situations.
- brazzledazzle 10y agoEasy enough to setup an authorized senders list. Really any group with a significant number of recipients should have that or failing that some way for a user to remove themselves.