<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.tdwrap
{mso-style-name:tdwrap;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:14.0pt;color:#1F497D">FYI<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> IT Service Desk <jlab@servicenowservices.com> <br>
<b>Sent:</b> Wednesday, July 6, 2022 6:10 PM<br>
<b>To:</b> Valerie Bookwalter <bookwalt@jlab.org><br>
<b>Subject:</b> Your Incident INC0083639 has comments added - I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Ku<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p><b><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">Subject:</span></b><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black"> I was contact by a Pansophy User (Ed Daly) who received a message from a previous
JLab employee (Ku</span><o:p></o:p></p>
<p><b><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">Incident:</span></b><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black"> INC0083639</span><o:p></o:p></p>
</div>
<div>
<p><strong><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif;color:black">Comments:</span></strong><o:p></o:p></p>
<div>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">
<hr size="2" width="100%" align="center">
</span></div>
</div>
<div>
<p class="MsoNormal"><strong><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">07-06-2022 06:09:38 PM EDT - Roger DuBois</span></strong><sup><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black"> Additional
comments</span></sup><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">Hi Valerie,<br>
<br>
The Pansophy email list is available to the public, along with the email archives. Google has crawled this public site, and made all emails in the archive available. It is likely that 'any' user on this list will return email results when searched on Google.<br>
<br>
If this is *not* what you expect, let me know.<br>
Thanks,<br>
Roger DuBois</span><o:p></o:p></p>
</div>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">
<hr size="2" width="100%" align="center">
</span></div>
</div>
<div>
<p class="MsoNormal"><strong><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">07-06-2022 01:49:07 PM EDT - Valerie Bookwalter</span></strong><sup><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black"> Additional
comments</span></sup><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Kurt Macha) who is retired about finding emails with his name
on google search . Inserted below:<br>
<br>
Hi PT,<br>
I received texts from Kurt Macha that I've pasted below. I thanked him for letting me know, and said I'd pass along the message.<br>
<br>
Is it possible that there is a security issue within Pansophy?<br>
Regards,<br>
Ed<br>
<br>
---------<br>
<br>
Ed, I noticed when searching my name on Google that some email chains at JLab are public. Someone might want to close such threads regarding private JLab information. Looks like this is widespread for others in SRF. I think this leak is related to Pansophy.
<br>
<br>
<a href="https://www.google.com/search?q=mailman.jlab.org+kurt+macha&biw=414&bih=707&sxsrf=ALiCzsZ6HetTn0N2XApL24KqDbU6Q6xW2g%3A1656450946423&ei=gm-7Yr6yGcPn5NoPopuvkA4&oq=mailman.jlab.org+kurt+macha&gs_lcp=ChNtb2JpbGUtZ3dzLXdpei1zZXJwEAMyBQghEKABMgUIIRCgATIFCCEQoAEyBQghEKABOgQIIxAnOgUIIRCrAkoECEEYAVD9CljdO2C-P2gAcAB4AIABjwOIAfcSkgEIMTAuNC4yLjKYAQCgAQHAAQE&sclient=mobile-gws-wiz-serp">https://www.google.com/search?q=mailman.jlab.org+kurt+macha&biw=414&bih=707&sxsrf=ALiCzsZ6HetTn0N2XApL24KqDbU6Q6xW2g%3A1656450946423&ei=gm-7Yr6yGcPn5NoPopuvkA4&oq=mailman.jlab.org+kurt+macha&gs_lcp=ChNtb2JpbGUtZ3dzLXdpei1zZXJwEAMyBQghEKABMgUIIRCgATIFCCEQoAEyBQghEKABOgQIIxAnOgUIIRCrAkoECEEYAVD9CljdO2C-P2gAcAB4AIABjwOIAfcSkgEIMTAuNC4yLjKYAQCgAQHAAQE&sclient=mobile-gws-wiz-serp</a><br>
<br>
Get Outlook for Android<br>
<br>
<br>
I am looking into the Pansophy system for recent emails sent to <a href="mailto:macha@jlab.org">
macha@jlab.org</a>. But broader than that, why is email accessible on google search?</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:black">You can view all the details of the incident by following the link below:</span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Helvetica",sans-serif"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__jlab.servicenowservices.com_nav-5Fto.do-3Furi-3Dincident.do-3Fsys-5Fid-3D58cfad911ba45150a888ea4ce54bcb51&d=DwMFaQ&c=CJqEzB1piLOyyvZjb8YUQw&r=aYqUCPYT_88Bj0dWUVdMaJfxMdMxnE6zbzxulqpTgEw&m=gSYMITkLMO7g29l5rm6VHFbWrV-iHdgq_9ybMVa82Nv7_mIoqUEgFyO-DTzHSlNR&s=XB3-zaWMjIgAd2_vIjEmTxQEvCGaiJkZUPpb6htRIAs&e="><span style="font-size:12.0pt;color:white;border:solid #0368D4 1.0pt;padding:4.0pt;background:#278EFC;text-decoration:none">Take
me to the Incident</span></a></span><o:p></o:p></p>
<p><strong><span style="font-size:13.5pt;font-family:"Helvetica",sans-serif;color:#999999">Original Request:</span></strong><o:p></o:p></p>
<p><span style="font-size:12.0pt;font-family:"Helvetica",sans-serif;color:#999999">I was contact by a Pansophy User (Ed Daly) who received a message from a previous JLab employee (Kurt Macha) who is retired about finding emails with his name on google search
. Inserted below:<br>
<br>
Hi PT,<br>
I received texts from Kurt Macha that I've pasted below. I thanked him for letting me know, and said I'd pass along the message.<br>
<br>
Is it possible that there is a security issue within Pansophy?<br>
Regards,<br>
Ed<br>
<br>
---------<br>
<br>
Ed, I noticed when searching my name on Google that some email chains at JLab are public. Someone might want to close such threads regarding private JLab information. Looks like this is widespread for others in SRF. I think this leak is related to Pansophy.
<br>
<br>
<a href="https://www.google.com/search?q=mailman.jlab.org+kurt+macha&biw=414&bih=707&sxsrf=ALiCzsZ6HetTn0N2XApL24KqDbU6Q6xW2g%3A1656450946423&ei=gm-7Yr6yGcPn5NoPopuvkA4&oq=mailman.jlab.org+kurt+macha&gs_lcp=ChNtb2JpbGUtZ3dzLXdpei1zZXJwEAMyBQghEKABMgUIIRCgATIFCCEQoAEyBQghEKABOgQIIxAnOgUIIRCrAkoECEEYAVD9CljdO2C-P2gAcAB4AIABjwOIAfcSkgEIMTAuNC4yLjKYAQCgAQHAAQE&sclient=mobile-gws-wiz-serp">https://www.google.com/search?q=mailman.jlab.org+kurt+macha&biw=414&bih=707&sxsrf=ALiCzsZ6HetTn0N2XApL24KqDbU6Q6xW2g%3A1656450946423&ei=gm-7Yr6yGcPn5NoPopuvkA4&oq=mailman.jlab.org+kurt+macha&gs_lcp=ChNtb2JpbGUtZ3dzLXdpei1zZXJwEAMyBQghEKABMgUIIRCgATIFCCEQoAEyBQghEKABOgQIIxAnOgUIIRCrAkoECEEYAVD9CljdO2C-P2gAcAB4AIABjwOIAfcSkgEIMTAuNC4yLjKYAQCgAQHAAQE&sclient=mobile-gws-wiz-serp</a><br>
<br>
Get Outlook for Android<br>
<br>
<br>
I am looking into the Pansophy system for recent emails sent to <a href="mailto:macha@jlab.org">
macha@jlab.org</a>. But broader than that, why is email accessible on google search?<o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Ref:MSG0583179_dLgFUEsga55u3O6zwdmC<o:p></o:p></p>
</div>
</div>
</body>
</html>