The analysis was conducted with the assistance of a lawyer specializing in data protection. A deliberate decision was made to share the dataset with Lovable so they could contact their customers and have the database access issues resolved.
1. The website owners should be informed so they can investigate how many of their customers are affected, notify them of the leak, and report it to the relevant authorities. However, we did not necessarily have their contact details or another way to reach them.
2. Sending thousands of emails to the leaked addresses could further expose that data, as the addresses would then be stored in our email client, on the mail server, and elsewhere. We would have needed to automate this, meaning a service like Mailgun would also receive the data. There was also a significant risk that these emails would end up in spam.
3. The most responsible path forward seemed to be sharing the website URLs and some metadata with Lovable, allowing them to contact the website owners through the appropriate channels.
The analysis was conducted with the assistance of a lawyer specializing in data protection. A deliberate decision was made to share the dataset with Lovable so they could contact their customers and have the database access issues resolved.
We discussed several aspects, including:
1. The website owners should be informed so they can investigate how many of their customers are affected, notify them of the leak, and report it to the relevant authorities. However, we did not necessarily have their contact details or another way to reach them.
2. Sending thousands of emails to the leaked addresses could further expose that data, as the addresses would then be stored in our email client, on the mail server, and elsewhere. We would have needed to automate this, meaning a service like Mailgun would also receive the data. There was also a significant risk that these emails would end up in spam.
3. The most responsible path forward seemed to be sharing the website URLs and some metadata with Lovable, allowing them to contact the website owners through the appropriate channels.
No matter how annoying you find a particular response! Reply and say it’s garbage instead.