Business

Edison Mail rolls back update after iOS users reported they could see strangers’ emails

Edison Mail has rolled back a software update that apparently let some users of its iOS app see emails from strangers’ accounts.

Several Edison users contacted The Verge to report seeing the glitch after they applied the update, which was meant to allow users to sync data across devices. Reader Matthew Grzybowski said after the update he had more than 100 unread messages from the UK-based email account of a stranger. He didn’t have to enter any credentials to see the emails, Grzybowski added.

Others on Twitter reported similar issues:

Petter Magnusson@MagnussonP

@Edison_apps not my email. Not my device. How can this still be going one and how can you not communicate anything. Clearly someone with the device “Mandy’s iPhone) currently has full access to my email accounts. Please tell me the data deletion works at least?

Petter Magnusson@MagnussonP
 

 

6

Twitter Ads info and privacy
See Petter Magnusson’s other Tweets
 
 

The company said it was a bug, not a security breach, and that the issue appeared limited to users of the iOS app.

“Ten hours ago a software update was rolled out to a small percentage of our user base. Some of these users who received the update are experiencing a flaw in the app impacting email accounts that was brought to our attention this morning,” the company said in an email to The Verge. “We have quickly rolled back the update. We are contacting the impacted Edison Mail users (limited to a subset of those users who have updated and opened the app in the last 10 hours) to notify them.”

Zach@zmknox

I just updated @Edison_apps Mail &, after enabling a new sync feature, an email account THAT IS NOT MINE showed up in the app, that I could seemingly axcess completely.
This is a SIGNIFICANT security issue. Accessing another’s email w/o credentials! Never trusting this app again.

Edison

@Edison_apps

 

We are urgently working to resolve this technical problem in Edison Mail. Yesterday a software update rolled out to a small percent of our users. We have reverted that now and are reaching out to users who have been impacted as fast as we can.

3

Twitter Ads info and privacy
See Edison’s other Tweets
 
 

Probably not a bad idea to change your password if you use Edison Mail just to be on the safe side.

See Campaign: https://www.theverge.com/2020/5/16/21260967/edison-mail-update-ios-security-bug
Contact Information:
Kim Lyons

Tags:
, Wire, Artificial Intelligence Newswire, United States, English

Contact Information:

Kim Lyons