Greenby security

[#1]

Plusnet allowed separate mail boxes each having their own password. The only way of accessing these separate boxes was to use the appropriate password for that box. Say, 5 boxes 5 passwords. Greenby migration gives these 5 boxes, but if the owner of the account logs in, the owner can see the contents of all the boxes. Privacy shot completely and maybe regarded as a data breach. Plusnet were not aware of this

[#2]

If you are the 'owner', and therefore presumably set up the mail-boxes, how can it be a 'data breach'?

[#3]

@briston 

Greenby migration gives these 5 boxes, but if the owner of the account logs in, the owner can see the contents of all the boxes.

Whilst it is easier on the Greenby portal as there are direct links to each mailbox webmail, it was always possible using the Plusnet portal. The account holder could change the password (which they had set in the first place!) for any mailbox and then login to webmail for that mailbox

[#4]

---

@briston wrote:
Plusnet were not aware of this

---

I suspect that to put it more accurately: The non technical Agent that answered the phone did not know this.

If you want privacy you don't use some-one else's account.

[#5]

I don't see a security concern here.

The owner / manager of any email system always has the potential to gain access to every email a/c.

Just as the administrator of an office computer has the potential to see or remove any files.