news.volyx.in

Someone at BrowserStack is leaking users' email addresses (shkspr.mobi)

391 points by m_km · 148 days ago · 104 comments on HN

Article summary

The author discovered that their unique email address, used only with BrowserStack, was leaked to Apollo.io, a sales platform. Apollo initially claimed the email was derived from publicly accessible information, but later admitted it came from BrowserStack. The author suspects that BrowserStack may be selling or giving away user data, or that an employee or contractor is exfiltrating data. The incident raises concerns about data privacy and security.

Main themes

  • Data leakage
  • User privacy
  • Sales platforms
  • Data brokers
  • GDPR
  • Email marketing

What commenters say

  • The leak may be due to a data breach or compromise rather than a deliberate sale of user data.
  • Apollo's business model involves collecting and sharing user data, which may be a violation of privacy.
  • Some companies, like Amazon, prioritize protecting user data and do not sell email lists.
  • The use of unique email addresses can help identify data leaks and track the source of spam.
  • Data brokers like Apollo often obtain data through questionable means, such as scraping or purchasing from other companies.
  • The incident highlights the need for stronger regulations and enforcement of data protection laws like GDPR.
  • Some commenters believe that companies like BrowserStack may be unaware of the privacy implications of uploading customer data to sales platforms.
  • The leak may be a result of a third-party service used by BrowserStack, rather than a direct action by the company.