Edison bug allowed access to other user's email accounts

added 18.05.2020 02:50

Image of article 'Edison bug allowed access to other user's email accounts'

In the February report, it was alleged Edison sold data to finance, travel, and e-commerce customers derived by scraping user emails.

Edison was identified in February as one of a number of apps that gathered data on its users, monitoring the contents of user messages to provide one-click buttons for actions and canned responses.

Users were posting to social media instances where the email accounts of a complete stranger were appearing on their devices, instead of their own, as reported by The Verge.

On Friday, Edison gained a new feature that allowed users of the third-party email app to synchronize their account across their Apple devices, including the Mac and iPhone.

The developers behind Edison Mail have rolled back an update to the email app issued on Friday, after some users discovered a security issue in a new synchronization feature where other people's accounts were accessible.