Subject: Re: Data Breach - 158952
From: Saurabh Dadu <[email-masked]>
To: "Pritish Nandi (LSM)" <[email-masked]>, "Heta Nyrhinen, HNYR" <[email-masked]>
Cc: "Sara Aknooni, SRAK" <[email-masked]>, Deeksha Dadu <[email-masked]>
Date: Thu, 15 Jul 2021 12:49:01 +0000

Hi Heta,

To add to this, This person Mario ONLY received alerts on 2 tickets.

Out of the 2 tickets, one ticket was for Mario himself. So net effect is 1 ticket.

Other tickets were from past for which no alert was sent to him, and he never logged into ZD help centre to access other tickets.

I request you to please DELETE or SUSPEND this user immediately so that he does not receive any future alert.

Please take prompt action.

Saurabh Dadu
LiveSalesman
India: +91 120 4332621 x 17
US: 1 240 949 2437
Cell: +91 9810175203
________________________________
From: Pritish Nandi <[email-masked]>
Sent: 15 July 2021 6:13 PM
To: Heta Nyrhinen, HNYR <[email-masked]>
Cc: Saurabh Dadu <[email-masked]>; Sara Aknooni, SRAK <[email-masked]>; Deeksha Dadu <[email-masked]>
Subject: Re: Data Breach - 158952

Hi Heta,

PFB the data which was requested by you.

Ticket Number   Is it a Data Breach?    How it was breached?    What data is shared?    Country
160156  No      This is the original ticket for the customer who has recived the date for all customers. Agent changed the Globle E support email address to customer email address in the profile rather then creating a new user account. He also changed the name in the profile     NA      Austria
158058  Yes     Customer email was changed      Order number and PO number      Japan
159145  Yes     Customer email was changed      Name and Email  UK
156493  Yes     Customer email was changed      Name, Email, Order number, PO number, Country, Issue    Ireland
144454  Yes     Customer email was changed      Twitter address, website, name, email, physical address, issue  UK
149875  Yes     Customer email was changed      Name, email and issue   France
146381  Yes     Customer email was changed      Name, Email and Issue   USA
142132  Yes     Customer email was changed      Name, email and issue   NA
140682  Yes     Customer email was changed      Name, Email and Issue   UAE
135752  Yes     Customer email was changed      Order number and PO number, issue       USA
126760  Yes     Customer email was changed      Name, Email and order number, PO number, issue  Japan
128991  Yes     Customer email was changed      Name, email, issue, physical address,   USA
127028  Yes     Customer email was changed      Name, Email, Order number, PO number, Country, Issue    USA
125963  Yes     Customer email was changed      Name, Email, Order number, PO number, Country, Issue    Germany
122788  Yes     Customer email was changed      Name, Email, Order number, PO number, Country, Issue    Australia
156219  Yes     Wrong customer in CC    Name, Email, phone number, physical address, entire customer conversation       Ireland
146044  Yes     Wrong customer in CC    Name, email and issue   USA
141179  Yes     Wrong customer in CC    Name, Email and issue   UAE
140683  Yes     Wrong customer in CC    Name, Email and issue   UAE
128815  Yes     Wrong customer in CC    Name, Email, phone number, physical address, entire customer conversation       USA
125697  Yes     Wrong customer in CC    Name, Email, Order number, PO number, Country, Issue    Germany
120455  Yes     Wrong customer in CC    Name, Email, phone number, physical address, entire customer conversation       Australia

Regards,
Pritish

________________________________
From: "Heta Nyrhinen, HNYR" <[email-masked]>
To: "Pritish Nandi" <[email-masked]>, "saurabh" <[email-masked]>
Cc: "Sara Aknooni, SRAK" <[email-masked]>, "deeksha" <[email-masked]>
Sent: Thursday, July 15, 2021 5:21:54 PM
Subject: RE: Data Breach - 158952

Hi,

The investigation indicates that the breach was caused in our Zendesk by changing Global-e email address [email-masked]<mailto:[email-masked]> to [email-masked]<mailto:[email-masked]>. Please investigate, which agent updated the email address.

The incident will be reported as a GDPR breach to the Danish authorities. Please provide the list with the data from the tickets within 30 minutes, as we’ll have to provide this information quickly.

Best regards​​

Heta Nyrhinen
Project Manager
Global Support and Service
+45 4470 0148
+45 2213 1261

EPOS Group A/S​ · Industriparken 27 · DK-2750 Ballerup · Denmark

<http://www.eposaudio.com/enterprise/aston-martin-f1?utm_source=mailsignatur&utm_medium=email&utm_campaign=am_f1&utm_content=nn_en_email_aw>

eposaudio.com<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eposaudio.com%2F&data=02%7C01%7Cjocg%40eposaudio.com%7Cfd5ccfd9b0ab478a468b08d7bb59979b%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637183865770799008&sdata=BXMQynvX%2FuQWt3Zsuv3DB9h1nePJBhPUMMUDthkfJjw%3D&reserved=0> · Follow us here

<https://www.facebook.com/eposenterprise><https://twitter.com/eposaudio?lang=da><https://www.linkedin.com/company/eposaudio/mycompany/><https://www.instagram.com/eposaudio/><https://www.youtube.com/channel/UCKZSbHA_gj3OKwPnKa4cNaA>

From: Heta Nyrhinen (HNYR)
Sent: 15. juli 2021 12:39
To: 'Pritish Nandi' <[email-masked]>
Cc: Sara Aknooni (SRAK) <[email-masked]>; Saurabh Dadu <[email-masked]>; deeksha <[email-masked]>
Subject: RE: Data Breach - 158952

Hi Pritish,

Thank you.

I would need a list of all 23 tickets with the personal data that was sent to Mario Jahn and the countries, where the end customers are located.

Global-e are investigating on their side also.

Best regards​​

Heta Nyrhinen
Project Manager
Global Support and Service
+45 4470 0148
+45 2213 1261

EPOS Group A/S​ · Industriparken 27 · DK-2750 Ballerup · Denmark

<http://www.eposaudio.com/enterprise/aston-martin-f1?utm_source=mailsignatur&utm_medium=email&utm_campaign=am_f1&utm_content=nn_en_email_aw>

eposaudio.com<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eposaudio.com%2F&data=02%7C01%7Cjocg%40eposaudio.com%7Cfd5ccfd9b0ab478a468b08d7bb59979b%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637183865770799008&sdata=BXMQynvX%2FuQWt3Zsuv3DB9h1nePJBhPUMMUDthkfJjw%3D&reserved=0> · Follow us here

<https://www.facebook.com/eposenterprise><https://twitter.com/eposaudio?lang=da><https://www.linkedin.com/company/eposaudio/mycompany/><https://www.instagram.com/eposaudio/><https://www.youtube.com/channel/UCKZSbHA_gj3OKwPnKa4cNaA>

From: Pritish Nandi <[email-masked]<mailto:[email-masked]>>
Sent: 15. juli 2021 12:17
To: Heta Nyrhinen (HNYR) <[email-masked]<mailto:[email-masked]>>
Cc: Sara Aknooni (SRAK) <[email-masked]<mailto:[email-masked]>>; Saurabh Dadu <[email-masked]<mailto:[email-masked]>>; deeksha <[email-masked]<mailto:[email-masked]>>
Subject: Re: Data Breach - 158952

This message comes from outside of the corporate network. Please do not click links or open attachments unless you recognize the source of this e-mail and know the content is safe.

Hi Heta,

Working on it asap.

Regards,

Pritish

________________________________

From: "Heta Nyrhinen, HNYR" <[email-masked]<mailto:[email-masked]>>
To: "Pritish Nandi" <[email-masked]<mailto:[email-masked]>>
Cc: "Sara Aknooni, SRAK" <[email-masked]<mailto:[email-masked]>>, "saurabh" <[email-masked]<mailto:[email-masked]>>, "deeksha" <[email-masked]<mailto:[email-masked]>>
Sent: Thursday, July 15, 2021 3:44:20 PM
Subject: RE: Data Breach - 158952

Hi,

Just to update that several customers’ personal data has leaked to [email-masked]<mailto:[email-masked]>, who is not an internal employee. Could you please investigate urgently, how all these tickets got linked to his email address? He is contacting the impacted end users directly. 23 tickets have been connected to his account. Please make an overview of them.

Best regards​​

Heta Nyrhinen
Project Manager
Global Support and Service
+45 4470 0148
+45 2213 1261

EPOS Group A/S​ · Industriparken 27 · DK-2750 Ballerup · Denmark

<https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eposaudio.com%2Fenterprise%2Faston-martin-f1%3Futm_source%3Dmailsignatur%26utm_medium%3Demail%26utm_campaign%3Dam_f1%26utm_content%3Dnn_en_email_aw&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181563979%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=FYO56kWVIQJyA7wkVqOpsc3KYkM%2Fv2xeFT%2BTzPRzOu0%3D&reserved=0>

eposaudio.com<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eposaudio.com%2F&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181563979%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=7L5muk%2Fckf93Lm%2BmUD9ENfQ%2BHUogF5MnBKR5WmKhuVA%3D&reserved=0> · Follow us here

<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Feposenterprise&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181573973%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=AizS4LqXcmtGm2O5ew0Dh%2FjL1%2BlFzhMHVM9%2FcehfvQo%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Feposaudio%3Flang%3Dda&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181573973%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=wj3RDq6fgVNvsEIiiH8CZg1mjG4MYUimmFeNukdBw0M%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Feposaudio%2Fmycompany%2F&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181583968%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=vX9nBWK2hAxJYMsc8eMHuLzMnYwPCf6zeE0UvMzMkR8%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Feposaudio%2F&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181583968%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=JvTbhOaBoBanSyRzxS2KY2cbROcRlgKYu8s%2BQBWRRDg%3D&reserved=0><https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCKZSbHA_gj3OKwPnKa4cNaA&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181593961%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=BS3QUvy5y1OqtvyHkN4iCjjPOX%2Baxi%2BqQp7yl0AwEBk%3D&reserved=0>

From: Pritish Nandi <[email-masked]<mailto:[email-masked]>>
Sent: 15. juli 2021 08:32
To: Heta Nyrhinen (HNYR) <[email-masked]<mailto:[email-masked]>>
Cc: Sara Aknooni (SRAK) <[email-masked]<mailto:[email-masked]>>; Saurabh Dadu <[email-masked]<mailto:[email-masked]>>; deeksha <[email-masked]<mailto:[email-masked]>>
Subject: Data Breach - 158952
Importance: High

This message comes from outside of the corporate network. Please do not click links or open attachments unless you recognize the source of this e-mail and know the content is safe.

Hi Heta,

We have identified a data breach after customer complaint. The employee responsible for the Data Breach is Grace where she merged a duplicate ticket (159145 ) from the same customer however forgot to

remove the EPOS employee from CC who forwarded the request to us. Customer is now furious and wants a solution for this data breach.

He is waiting for our response.

For the employee we have issued a formal warning letter and also a financial penalty for this error.

Regards,

Pritish Nandi