Github leaks 1500 emails

A few months back i applied for a github enterprise trial and apparently they added me to some sort of mailing list. It seems like someone made the mistake of putting the whole mailing list inside of the to fields for all of their expirations. So i received the following emails at 7:01AM.

Email 1:

To: (1477 recipients)
From: GitHub
Subject: COOKPAD Inc., your GitHub Enterprise license expires in 31 days

We're reaching out to remind you that your GitHub Enterprise license is coming up for renewal in 31 days:

COOKPAD Inc.
License 0462f3
Created: April 18, 2012
Expires: April 18, 2013

Whenever you're ready, you can place your renewal order here:
https://enterprise.github.com/purchase

If you have any questions about this renewal process, or if there's anything else we can help with, just reply to this email and we'll be glad to help.

Thank you for choosing GitHub Enterprise!
The GitHub Team

Email 2:

To: (1477 recipients)
From: GitHub
Subject: Yandex, your GitHub Enterprise license expires in 31 days

We're reaching out to remind you that your GitHub Enterprise license is coming up for renewal in 30 days:

Yandex
License edbefa
Created: April 18, 2012
Expires: April 18, 2013

Whenever you're ready, you can place your renewal order here:
https://enterprise.github.com/purchase

If you have any questions about this renewal process, or if there's anything else we can help with, just reply to this email and we'll be glad to help.

Thank you for choosing GitHub Enterprise!
The GitHub Team

Email 3:

To: (1477 recipients)
From: GitHub
Subject: Bracket Computing, your GitHub Enterprise license expires in 31 days

We're reaching out to remind you that your GitHub Enterprise license is coming up for renewal in 30 days:

Bracket Computing
License d55a32
Created: April 18, 2012
Expires: April 18, 2013

Whenever you're ready, you can place your renewal order here:
https://enterprise.github.com/purchase

If you have any questions about this renewal process, or if there's anything else we can help with, just reply to this email and we'll be glad to help.

Thank you for choosing GitHub Enterprise!
The GitHub Team

Email 4:

To: (1477 recipients)
From: GitHub
Subject: QuiBids, your GitHub Enterprise license expires in 31 days

We're reaching out to remind you that your GitHub Enterprise license is expiring today:

QuiBids
License c1ab4d
Created: March 19, 2012
Expires: March 19, 2013

To avoid any downtime, please place your renewal order here:
https://enterprise.github.com/purchase

If you have any questions about this renewal process, or if there's anything else we can help with, just reply to this email and we'll be glad to help.

Thank you for choosing GitHub Enterprise!
The GitHub Team

Follow Up (9:22 AM):

From: GitHub Support
Subject: GitHub Enterprise renewal email issue

This morning a routine email was accidentally sent to many of our GitHub Enterprise customers. In these errant emails, customer email addresses were included in the To: field, making them visible to anyone who received the message.

We have stopped the remaining messages in the email batch from being sent, and are investigating how this happened.

We are very sorry that your email address was accidentally shared. Your GitHub Enterprise installation is unaffected, and no license keys or any other data were exposed during this incident.

We are investigating the root cause of this email issue and will update our blog with our findings.

Again, we are very sorry this happened. Your privacy is very important to us and we will be making changes to ensure that this does not happen again.

If you have any further questions please email us at [email protected]

Just for fun i compiled a list of domains that were mentioned in the email:

  • 247-inc.com
  • 2co.com
  • 2go.im
  • 360buy.com
  • 4over.com
  • 500px.com
  • 66.com
  • accuray.com
  • acer.edu.au
  • achievers.com
  • acm.org
  • acquia.com
  • active.by
  • activestate.com
  • actv8.me
  • actv8corp.com
  • adcash.com
  • adcloud.com
  • adfitech.com
  • adobe.com
  • adp.com
  • advancedcomputersoftware.com
  • aemo.com.au
  • aenetworks.com
  • aerofs.com
  • aeroinfo.com
  • affinnova.com
  • afni.com
  • afphq.org
  • aglimmerofhope.org
  • ahc.uk.com
  • aida.de
  • ainfosec.com
  • akqa.com
  • alee.com
  • alertlogic.com
  • allianz-assistance.ca
  • ally.com
  • altair.com
  • am.sony.com
  • amiando.com
  • analog.com
  • analytehealth.com
  • analytemedia.com
  • andyet.net
  • anjuke.com
  • anton-paar.com
  • ap.irco.com
  • apartments.com
  • apexclearing.com
  • apm.com
  • appfog.com
  • apple.com
  • apptio.com
  • aragoncs.com
  • arcode.com
  • arimacomm.com.tw
  • arkansas.gov
  • arthrex.com
  • assembla.com
  • astrata.mx
  • atlassian.com
  • atmel.com
  • atomicobject.com
  • atsistemas.com
  • att.com
  • attinteractive.com
  • au.westfield.com
  • audeocloud.com
  • aurorallc.com
  • autodesk.com
  • availmedia.com
  • aveva.com
  • aviall.com
  • avidlifemedia.com
  • avira.com
  • aweber.com
  • axosoft.com
  • badjao.fr
  • bah.com
  • baixing.com
  • bakerhughes.com
  • baml.com
  • bandwidth.com
  • bankofamerica.com
  • banksimple.com
  • barbariangroup.com
  • barclays.com
  • barclayscapital.com
  • bassh.net
  • bat.com
  • bazaarvoice.com
  • bbg.gov
  • beachbody.com
  • bechtel.com
  • beckman.com
  • believedigital.com
  • bendigobank.com.au
  • berkeley.edu
  • betfair.com
  • bigcommerce.com
  • bingosoft.net
  • bisimulations.com
  • bittorrent.com
  • bjss.co.uk
  • blackboard.com
  • blip.tv
  • blitzpay.mygbiz.com
  • blizzard.com
  • blocket.se
  • blue.cpoint.net
  • bluebox.net
  • blueprintmarketing.com
  • bluewatermedia.com
  • blurb.com
  • bms.com
  • bnotions.com
  • boeing.com
  • bom.gov.au
  • bonera.com.br
  • bongous.com
  • boo-box.com
  • book.com
  • boursedirect.fr
  • box.com
  • bqsoft.com
  • brainengine.net
  • brightcove.com
  • broadnet.no
  • brocade.com
  • bromium.com
  • bserved.nl
  • bt.com
  • btbilgi.com.tr
  • btfinancialgroup.com
  • bu.mp
  • buddymedia.com
  • bus.msu.edu
  • busn.uconn.edu
  • ca.com
  • cakedc.com
  • calsoftinc.com
  • campfirelabs.com
  • canadadrugs.com
  • capitainetrain.com
  • capitalone.com
  • carbonite.com
  • carbyn.com
  • carefusion.com
  • caresource.com
  • carltonholding.net
  • carnegiemuseums.org
  • castlabs.com
  • cat.com
  • cbsinteractive.com
  • ccc-ltd.com
  • ccs.neu.edu
  • celebros.com
  • cellcom.co.il
  • cerner.com
  • cgifederal.com
  • cgraphics.com
  • ch.sauter-bc.com
  • chomp.com
  • ciklum.com
  • cisco.com
  • citrix.com
  • citydeal.fr
  • cityguide.com
  • clickhere.com
  • clickinglabs.com
  • cloud9ers.com
  • cloudera.com
  • cmegroup.com
  • cnet.com
  • co.sapo.pt
  • coacan.es
  • cochlear.com
  • codewizer.com
  • cognizant.com
  • cogta.gov.za
  • comcast.com
  • commun.ca
  • communitytissue.org
  • componentworkshop.com
  • comverge.com
  • conduit.com
  • conocophillips.com
  • constantcontact.com
  • cookpad.com
  • corp.badoo.com
  • corp.terra.com.br
  • counsyl.com
  • cpba.com.ar
  • criteo.com
  • crossbeam.com
  • crossbeamsys.com
  • crown.com
  • crystals.ru
  • cse-cst.gc.ca
  • csuchico.edu
  • curse.com
  • cyberagent.co.jp
  • cyberpointllc.com
  • cybersponse.com
  • cybozu.co.jp
  • cydesign.com
  • cyphergenomics.com
  • d-itlab.co.jp
  • dasannetworks.com
  • dattobackup.com
  • db.com
  • debenhams.com
  • defence.gov.au
  • defendassist.com
  • dell.com
  • demonware.net
  • denso.co.jp
  • designrivers.com
  • devbridge.com
  • deviantart.com
  • devpocket.com
  • dgplabs.com
  • dianping.com
  • dice.se
  • didacware.ch
  • different-solutions.de
  • digi.com
  • digital.cabinet-office.gov.uk
  • digitalbarriers.com
  • disney.com
  • dk.fujitsu.com
  • doxense.com
  • dr.dk
  • dreamworldpartners.com
  • drecom.co.jp
  • dropbox.com
  • drukwerkdeal.nl
  • drweb.com
  • dse.vic.gov.au
  • dsto.defence.gov.au
  • dwango.co.jp
  • dynetics.com
  • ea.com
  • ebay.com
  • echostar.com
  • edftrading.com
  • eecs.berkeley.edu
  • efgfp.com
  • eficode.com
  • ekino.com
  • elasticsales.com
  • elbitsystems-us.com
  • eloqua.com
  • elosoft.com.br
  • email.ikv-tech.com
  • emc.com
  • enbridge.com
  • endgames.us
  • enernoc.com
  • engr.ncsu.edu
  • engrande.com
  • enmasse.com
  • enova.com
  • enovafinancial.com
  • ensighten.com
  • enterasys.com
  • epb.net
  • epixelic.com
  • epocrates.com
  • eppendorf.de
  • ergoitalia.it
  • ericgerhardt.com
  • ericsson.com
  • erskinedesign.com
  • esolutionsgroup.ca
  • espn.com
  • esri.com
  • etsy.com
  • eurochem.ru
  • evolonix.com
  • example.com
  • expandrive.com
  • expedia.com
  • experianinteractive.com
  • exploratorium.edu
  • external.mckinsey.com
  • eyari.com
  • eyefi.com.au
  • ezrez.com
  • f-secure.com
  • fashiongps.com
  • fast-lta.de
  • fast.ag
  • fast.fujitsu.com.au
  • fctechno.com
  • feedhenry.com
  • feedzai.com
  • fictionpress.com
  • fidor.de
  • firecrackerpm.com
  • firehost.com
  • firstentrepreneur.com
  • flixster-inc.com
  • flowcal.com
  • flurry.com
  • fmr.com
  • forbes.com
  • foreks.com
  • forthnetgroup.gr
  • fourdigits.nl
  • fox.com
  • fpcu.org
  • frb.gov
  • freelancersunion.org
  • frende.no
  • fugroairborne.com.au
  • funzio.com
  • fyndiq.se
  • gaikai.com
  • garaio.com
  • gchq.gsi.gov.uk
  • ge.com
  • generalbiologic.com
  • gensler.com
  • geodecisions.com
  • giantleap.no
  • giffgaff.co.uk
  • gilt.com
  • gilt.jp
  • glgroup.com
  • globys.com
  • gmail.com
  • gmc.net
  • gmi.oeaw.ac.at
  • go2group.com
  • goodrich.com
  • google.com
  • googlemail.com
  • gosecureauth.com
  • govsg.com
  • grainger.com
  • gravity.com
  • greatcall.com
  • gree.co.jp
  • grey.com
  • groupon.com
  • grupaonet.pl
  • grupodot.com
  • gu3.co.jp
  • gumikorea.com
  • habaluc.es
  • harris.com
  • harvard.edu
  • hasbro.com
  • haystacksoftware.com
  • hcc-md.com
  • hcl.com
  • healthmarketscience.com
  • heliostech.hk
  • hie.com.au
  • highgroove.com
  • hightouchinc.com
  • hillcrestlabs.com
  • hmc.psu.edu
  • hobbylobby.com
  • hogarthww.com
  • homeaway.com
  • hopper.com
  • hopper.travel
  • hotmail.com
  • hp.com
  • hsbcib.com
  • hsn.net
  • htc.com
  • huawei.com
  • hubspot.com
  • huddle.com
  • huddle.net
  • hzdg.com
  • iacquire.com
  • idcf.jp
  • ie.com
  • ifdsgroup.co.uk
  • iforium.com
  • ikami.com
  • ikindi.com
  • illinois.edu
  • imageworks.com
  • imbriaco.com
  • imc-chicago.com
  • immersivetechnologies.com
  • in.bosch.com
  • incodetel.com
  • indelible.tv
  • indigital.net
  • inductiveautomation.com
  • industrial-perception.com
  • inf.ethz.ch
  • inflection.com
  • infor.com
  • infospace.com
  • infosys.com
  • infotel.com
  • inkling.com
  • inmobi.com
  • innova-partners.com
  • inquesttechnologies.com
  • insilicodb.com
  • instructables.com
  • intact.net
  • integratelecom.com
  • intel.com
  • intellimec.com
  • interbrug.nl
  • interworks.com
  • intin.co.uk
  • intracom.com
  • intspirit.com
  • intuit.com
  • inventic.it
  • invoke.se
  • iomart.com
  • ipcmedia.com
  • iqt.org
  • irdeto.com
  • iridia.nl
  • ironsis.com
  • ispeech.org
  • issinc.com
  • istreamfs.com
  • it.uib.no
  • itron.com
  • itwm.fraunhofer.de
  • iu.edu
  • iust.ac.ir
  • ixolit.com
  • izzonet.com
  • jadu.net
  • jawbone.com
  • jestadigital.com
  • jetbrains.com
  • jianqin.com.cn
  • jimdo.com
  • jivesoftware.com
  • jonrohan.me
  • jumptrading.com
  • juniper.net
  • kakao.com
  • kemper.com
  • kensingtontours.com
  • kickbackpoints.com
  • klab.jp
  • klarna.com
  • knoa.com
  • knowclassic.com
  • kohls.com
  • kontagent.com
  • kp.org
  • kreuzwerker.de
  • kruxdigital.com
  • l-3com.com
  • lab.ntt.co.jp
  • lab126.com
  • lafourchette.com
  • laureateinstitute.org
  • lavainternational.in
  • ldschurch.org
  • leapfrogonline.com
  • leereilly.net
  • level3.com
  • lewis-teck.co.uk
  • lexmark.com
  • lexum.com
  • lge.com
  • lic.co.nz
  • life360.com
  • lightspeedsystems.com
  • lindenlab.com
  • linkedin.com
  • linux.org.tr
  • liquidation.com
  • liquidnet.com
  • litle.com
  • littlechicken.nl
  • live.ru
  • liveops.com
  • liveramp.com
  • liveworld.com
  • livingsocial.com
  • ll.mit.edu
  • llevatetuweb.com
  • llnl.gov
  • llnw.com
  • lloyds.com
  • lloydsbanking.com
  • lmco.com
  • logiclogic.jp
  • logos.com
  • lotaris.com
  • lotsys.com
  • lowes.com
  • luminosity-group.com
  • lyatiss.com
  • m6.fr
  • macquarie.com
  • maerskoil.com
  • mail.nih.gov
  • mail.rakuten.com
  • malwarebytes.org
  • mandiant.com
  • manilla.com
  • mapion.co.jp
  • masterson-tech.com
  • matasano.com
  • mathworks.com
  • mckesson.com
  • mckinsey.com
  • mdaus.com
  • mediamolecule.com
  • medtronic.com
  • megaplan.ru
  • mejsla.se
  • melbourneit.com.au
  • mellmo.com
  • memeo-inc.com
  • mentor.com
  • metadesign.de
  • metalsx.com.au
  • metaltoad.com
  • meyle-mueller.de
  • mii.com
  • millennialmedia.com
  • miootive.com
  • mit.edu
  • mitre.org
  • ml.yahoo-corp.jp
  • mmm.com
  • mobileiron.com
  • mobilem.net
  • morganstanley.com
  • mosaic.com
  • motionreality.com
  • moultonlogistics.com
  • mssm.edu
  • mtifilm.com
  • mtvne.com
  • mustexist.com
  • mylookout.com
  • myspace-inc.com
  • nab.com.au
  • nads.es
  • nasa.gov
  • nascar.com
  • nationwide.com
  • navcanada.ca
  • ncsoft.com
  • ncsu.edu
  • nds.com
  • netflix.com
  • netlogicmicro.com
  • networld.hk
  • neudesic.com
  • neuroscouting.com
  • newsint.co.uk
  • newslab.cz
  • nexteraenergy.com
  • nextidentity.nl
  • ngmoco.com
  • nhn.com
  • nhn.no
  • nicheenergyinc.com
  • nifty.co.jp
  • nih.gov
  • nintendo.co.jp
  • noblesamurai.com
  • nodes.dk
  • nokia.com
  • nominum.com
  • noosh.com
  • nordea.com
  • norman.com
  • nrel.gov
  • nrl.navy.mil
  • ntrepidcorp.com
  • nttdata.com
  • nuskin.com
  • nv.doe.gov
  • oblong.com
  • occipital.com
  • octeth.com
  • officedrop.com
  • oit.gatech.edu
  • omnifone.com
  • on-site.com
  • onekingslane.com
  • onlive.com
  • onthebeach.co.uk
  • ooyala.com
  • opendns.com
  • opensky.com
  • openx.com
  • opower.com
  • oracle.com
  • orbitz.com
  • ornl.gov
  • oslomarketsolutions.no
  • otpp.com
  • otsuka-us.com
  • outbreakstudios.se
  • oversee.net
  • oxygene-tanukis.com
  • palantir.com
  • pantheonsoftware.org
  • parallels.com
  • parc.com
  • parker.com
  • parking.com
  • partner.nri.co.jp
  • patientway.com
  • patlive.com
  • paypal.com
  • paytronix.com
  • pb.com
  • pdt.com
  • pearson.com
  • peff.net
  • penson.com
  • perfectblue.nl
  • perimeterusa.com
  • petrobras.com.br
  • pharma.com
  • pinterest.com
  • pixelwind.de
  • pluron.com
  • pnimedia.com
  • postkodlotteriet.se
  • precio.se
  • prepor.ru
  • prettysweetlabs.com
  • primedia.com
  • process-one.net
  • projectdot.net
  • ptsecurity.ru
  • puma.com
  • puppetlabs.com
  • pushbutton.tv
  • qualcomm.com
  • qualys.com
  • quantcast.com
  • quepasacorp.com
  • quibids.com
  • quickenloans.com
  • qvine.com
  • rackspace.com
  • radisson.com
  • radisson.om
  • rantek.dk
  • rapleaf.com
  • raytheon.com
  • rbcon.com
  • rd.io
  • rea-group.com
  • readyat.com
  • reaktor.fi
  • realtors.org
  • rec.ri.cmu.edu
  • reconrobotics.com
  • reelfx.com
  • rememberthemilk.com
  • renishaw.com
  • resources-fr.com
  • rgmadvisors.com
  • rim.com
  • riotgames.com
  • riversidesheriff.org
  • roamdata.com
  • rocket-internet.cn
  • rocketfuel.com
  • roseassociation.com
  • rosetta.com
  • rpc.us.com
  • rubiconproject.com
  • rushworth.co.nz
  • rwe.com
  • s1.com
  • sagemcom.com
  • saic.com
  • saiglobal.com
  • sailthru.com
  • salesforce.com
  • samsung.com
  • sandia.gov
  • sandvine.com
  • sap.com
  • sas.com
  • sbab.se
  • scalingtechnologies.com
  • scee.net
  • schantz.com
  • sdl.usu.edu
  • searshc.com
  • secondmarket.com
  • seecrypt.com
  • sellstrom.me
  • sentryds.com
  • sfr.com
  • sfu.ca
  • sherwin.com
  • shield-lock.com
  • shimanoweb.com
  • shunra.com
  • shutterstock.com
  • siemens.com
  • silvertailsystems.com
  • silvertech.com
  • simple.com
  • simplegeo.com
  • simplicitymedialtd.co.uk
  • simplyhired.com
  • sina.com
  • siriusxm.com
  • sisa.samsung.com
  • sitelock.com
  • sjm.com
  • skidmore.edu
  • skilamederi.com
  • skype.net
  • slickdeals.net
  • smalltreemedia.com
  • smartsynch.com
  • snap-interactive.com
  • snda.com
  • snsreaal.nl
  • softwarecenter.com
  • softwareinmotion.de
  • sohonet.co.uk
  • solfo.com
  • sonalysts.com
  • sonypictures.com
  • sorenson.com
  • soundtransit.org
  • sourcebits.com
  • sourcefire.com
  • spaceapegames.com
  • spe.sony.com
  • spilgames.com
  • sportingindex.com
  • squaretrade.com
  • squareup.com
  • srslabs.com
  • stanford.edu
  • starcounter.com
  • stec-inc.com
  • stickyeyes.com
  • stls.frb.org
  • storyspaces.org
  • strategicdata.com.au
  • stratusbv.nl
  • striketechnologies.com
  • strong-bridge.com
  • stubhub.com
  • sunbeltrentals.com
  • sunbeltreporting.com
  • sungard.com
  • supinfo.com
  • surveymonkey.com
  • swisslife.fr
  • switchina.cn
  • swmich.edu
  • sykes.com
  • synapse.com
  • synechron.com
  • synergytechservices.com
  • tagged.com
  • talent-planet.com
  • talentmedia.co.jp
  • tallertechnologies.com
  • taobao.com
  • target.com
  • tart.com.tr
  • teamaol.com
  • teambox.com
  • teamknowledge.co.uk
  • technicolor.com
  • tecsolsoftware.com
  • teledyne.com
  • teltechcorp.com
  • terremark.com
  • texeltek.com
  • tfoundry.com
  • tgl.co.jp
  • theablefew.com
  • theopenskyproject.com
  • thepeaklab.com
  • thevigilant.com
  • thinkreflect.com
  • thinkrelevance.com
  • thismoment.com
  • tibus.com
  • tid.es
  • tier3.com
  • tigerlead.com
  • tigerlms.com
  • tk.de
  • tmatesoft.com
  • tmcbonds.com
  • tnb.com
  • tomayko.com
  • tommy.com
  • tomorrow-focus.de
  • tomtom.com
  • topmonks.com
  • totalmarketexposure.com
  • totsy.com
  • touchcommerce.com
  • tr.ibm.com
  • tracfone.com
  • trada.com
  • tradition.com
  • transact.com.au
  • tribalgroup.com
  • tripadvisor.com
  • truecar.com
  • tudor.com
  • tuhh.de
  • tumblr.com
  • tversu.ru
  • tw.de
  • twcable.com
  • tweglobal.com
  • twilio.com
  • twinfield.com
  • twsoftware.com.br
  • tx-inc.com
  • tyemill.com
  • uber.com.au
  • ubermind.com
  • ubs.com
  • ucmail.uc.edu
  • ucr.edu
  • uekae.tubitak.gov.tr
  • ufna.ru
  • ugratel.ru
  • uhc.com
  • ulster.ac.uk
  • umantec.net
  • umbrasoftware.com
  • umeng.com
  • umn.edu
  • underarmour.com
  • undergroundelephant.com
  • united-domains.de
  • unl.edu
  • ups.com
  • ursys.com.au
  • us.army.mil
  • us.innovation-group.com
  • usace.army.mil
  • ustwo.co.uk
  • usurf.usu.edu
  • utah.edu
  • uum.edu.my
  • varian.com
  • veikkaus.fi
  • velsol.com
  • vendavo.com
  • verisign.com
  • verizon.com
  • vietnambiz.com
  • vimeo.com
  • viralheat.com
  • virtualize.ae
  • visualjazz.com.au
  • vmware.com
  • voupe.com
  • voyagegroup.com
  • vz.net
  • walmart.com
  • warecorp.com
  • warnermusic.com
  • wavegroup.it
  • webmd.net
  • wecode.nl
  • weebly.com
  • weightwatchers.com
  • wgen.net
  • whitepages.com
  • wijs.be
  • windstream.net
  • wisegroup.co.nz
  • wishabi.com
  • wonga.com
  • work.qeedoo.com
  • wrdsb.on.ca
  • wyderits.ch
  • wyplay.com
  • xactware.com
  • xero.com
  • xixun.com
  • xobni.com
  • xogrp.com
  • xse.de
  • xyratex.com
  • yahoo-inc.com
  • yale.edu
  • yandex-team.ru
  • yandex.com.tr
  • yellowpencil.com
  • youzee.com
  • zappos.com
  • zenjoy.be
  • zohocorp.com
  • zuehlke.com
  • zvents.com
  • zynga.com
  • zynx.com