arstechnica.com 8/10/2026, 2:41:08 PM · external

Researcher Catches Company Secrets Sent to Wrong Noreply Domains

Researcher Catches Company Secrets Sent to Wrong Noreply Domains
CyberSIXT Evidence Panel Source marked as original reporting

CORY Solovewicz, a security researcher, has received an overwhelming amount of unintended emails since acquiring the domains noreply.us and noreply.net, officially registering 401,796 messages, revealing private information and company secrets from various organizations. Initially intending to filter messages for privacy, Solovewicz discovered that companies mistakenly sent sensitive data to these domains, creating an accidental "honeypot."

He has since taken it upon himself to alert companies about their misconfigured systems that lead to these breaches. Solovewicz's findings highlight the issue of companies using placeholder email addresses without proper safeguards, a problem echoed by another researcher, Mike Sheward, who similarly owns domains capturing sensitive emails. Both researchers advocate for better practices to safeguard against such data leaks.

View full article

Article by CyberSIXT