Data breach caused by ‘cc’: providing honest information and reporting it properly
Even a single email with all the addresses in the cc field constitutes a data breach. CrisisRadar helps you to inform those affected quickly, apologise and report the breach in good time.
What happens
An employee sends an email to a large group of people and accidentally puts all the addresses in the ‘cc’ field instead of the ‘bcc’ field. Everyone can now see everyone else’s email addresses. It is a minor mistake with major consequences. Reactions soon start coming in from people wondering why their details are visible. For some groups, such as patients or clients, this can be a sensitive issue. An honest explanation, accompanied by an apology, must be provided quickly, and the data breach must be reported correctly.
From alert to clear communication
Respond quickly
Briefly and honestly inform those involved about what has happened.
Apologies and an explanation
Apologise and explain what you are doing to prevent it from happening again.
Please report it properly
Report the data breach to the relevant supervisory authority in good time, where required.
Who collaborates in this scenario
CrisisRadar brings all the parties involved into line, with a single shared situational picture.
- Stakeholders informed promptly and honestly
- Apologies and clear explanations prevent unrest
- Data breach reported in a timely and correct manner
- Measures to prevent a recurrence have been set out
Well prepared for this scenario?
In a short demo we show you how CrisisRadar helps, from preparation to the first minute of the crisis.