P2017-ND-055

Hyatt Hotels Corporation

On November 1, 2016, the Organization sent two separate emails to owners and tenants respectively to notify them about the license suspension of a property management company. In both cases, email addresses of all recipients were included in the “To” line instead of the “BCC” line, disclosing all email addresses to the recipients. Fourteen (14) of the emails bounced back as un-deliverable. On November 3, 2016 an employee of the suspended brokerage firm reported the error to the Organization.

File Type: pdf
Categories: 2017
Tags: Unauthorized access