Subject: Re: Data Breach - 158952
From: Pritish Nandi <[email-masked]>
To: saurabh <[email-masked]>
Date: Mon, 19 Jul 2021 02:35:39 -0700 (MST)

Hi Sir, 

This was sent before you sent an email and you added your points on top of this email. 

I would discuss this with you going further. 

Regards, 
Pritish 

From: "saurabh" <[email-masked]> 
To: "Pritish Nandi" <[email-masked]> 
Sent: Monday, July 19, 2021 3:03:16 PM 
Subject: Re: Data Breach - 158952 

Pritish, 

You sent this report - even after I explained you what happened? Please be careful before you send such reports. 

Moving forward any such reports must first be verified by me. 

Saurabh Dadu 
LiveSalesman 
India: +91 120 4332621 x 17 
US: 1 240 949 2437 
Cell: +91 9810175203 

From: Pritish Nandi <[email-masked]> 
Sent: 15 July 2021 6:13 PM 
To: Heta Nyrhinen, HNYR <[email-masked]> 
Cc: Saurabh Dadu <[email-masked]>; Sara Aknooni, SRAK <[email-masked]>; Deeksha Dadu <[email-masked]> 
Subject: Re: Data Breach - 158952 
Hi Heta, 

PFB the data which was requested by you. 

	Ticket Number 	Is it a Data Breach? 	How it was breached? 	What data is shared? 	Country 
	160156 	No 	This is the original ticket for the customer who has recived the date for all customers. Agent changed the Globle E support email address to customer email address in the profile rather then creating a new user account. He also changed the name in the profile 	NA 	Austria 
	158058 	Yes 	Customer email was changed 	Order number and PO number 	Japan 
	159145 	Yes 	Customer email was changed 	Name and Email 	UK 
	156493 	Yes 	Customer email was changed 	Name, Email, Order number, PO number, Country, Issue 	Ireland 
	144454 	Yes 	Customer email was changed 	Twitter address, website, name, email, physical address, issue 	UK 
	149875 	Yes 	Customer email was changed 	Name, email and issue 	France 
	146381 	Yes 	Customer email was changed 	Name, Email and Issue 	USA 
	142132 	Yes 	Customer email was changed 	Name, email and issue 	NA 
	140682 	Yes 	Customer email was changed 	Name, Email and Issue 	UAE 
	135752 	Yes 	Customer email was changed 	Order number and PO number, issue 	USA 
	126760 	Yes 	Customer email was changed 	Name, Email and order number, PO number, issue 	Japan 
	128991 	Yes 	Customer email was changed 	Name, email, issue, physical address, 	USA 
	127028 	Yes 	Customer email was changed 	Name, Email, Order number, PO number, Country, Issue 	USA 
	125963 	Yes 	Customer email was changed 	Name, Email, Order number, PO number, Country, Issue 	Germany 
	122788 	Yes 	Customer email was changed 	Name, Email, Order number, PO number, Country, Issue 	Australia 
	156219 	Yes 	Wrong customer in CC 	Name, Email, phone number, physical address, entire customer conversation 	Ireland 
	146044 	Yes 	Wrong customer in CC 	Name, email and issue 	USA 
	141179 	Yes 	Wrong customer in CC 	Name, Email and issue 	UAE 
	140683 	Yes 	Wrong customer in CC 	Name, Email and issue 	UAE 
	128815 	Yes 	Wrong customer in CC 	Name, Email, phone number, physical address, entire customer conversation 	USA 
	125697 	Yes 	Wrong customer in CC 	Name, Email, Order number, PO number, Country, Issue 	Germany 
	120455 	Yes 	Wrong customer in CC 	Name, Email, phone number, physical address, entire customer conversation 	Australia 

Regards, 
Pritish 

From: "Heta Nyrhinen, HNYR" <[email-masked]> 
To: "Pritish Nandi" <[email-masked]>, "saurabh" <[email-masked]> 
Cc: "Sara Aknooni, SRAK" <[email-masked]>, "deeksha" <[email-masked]> 
Sent: Thursday, July 15, 2021 5:21:54 PM 
Subject: RE: Data Breach - 158952 

Hi, 

The investigation indicates that the breach was caused in our Zendesk by changing Global-e email address [ mailto:[email-masked] | [email-masked] ] to [ mailto:[email-masked] | [email-masked] ] . Please investigate, which agent updated the email address. 

The incident will be reported as a GDPR breach to the Danish authorities. Please provide the list with the data from the tickets within 30 minutes, as we’ll have to provide this information quickly. 

Best regards​​ 

Heta Nyrhinen 
Project Manager 
Global Support and Service 
+45 4470 0148 
+45 2213 1261 

EPOS Group A/S​ · Industriparken 27 · DK-2750 Ballerup · Denmark 

[ http://www.eposaudio.com/enterprise/aston-martin-f1?utm_source=mailsignatur&utm_medium=email&utm_campaign=am_f1&utm_content=nn_en_email_aw ] 

	

[ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eposaudio.com%2F&data=02%7C01%7Cjocg%40eposaudio.com%7Cfd5ccfd9b0ab478a468b08d7bb59979b%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637183865770799008&sdata=BXMQynvX%2FuQWt3Zsuv3DB9h1nePJBhPUMMUDthkfJjw%3D&reserved=0 | eposaudio.com ] · Follow us here 	

[ https://www.facebook.com/eposenterprise ] [ https://twitter.com/eposaudio?lang=da ] [ https://www.linkedin.com/company/eposaudio/mycompany/ ] [ https://www.instagram.com/eposaudio/ ] [ https://www.youtube.com/channel/UCKZSbHA_gj3OKwPnKa4cNaA ] 

	

	

From: Heta Nyrhinen (HNYR) 
Sent: 15. juli 2021 12:39 
To: 'Pritish Nandi' <[email-masked]> 
Cc: Sara Aknooni (SRAK) <[email-masked]>; Saurabh Dadu <[email-masked]>; deeksha <[email-masked]> 
Subject: RE: Data Breach - 158952 

Hi Pritish, 

Thank you. 

I would need a list of all 23 tickets with the personal data that was sent to Mario Jahn and the countries, where the end customers are located. 

Global-e are investigating on their side also. 

Best regards​​ 

Heta Nyrhinen 
Project Manager 
Global Support and Service 
+45 4470 0148 
+45 2213 1261 

EPOS Group A/S​ · Industriparken 27 · DK-2750 Ballerup · Denmark 

[ http://www.eposaudio.com/enterprise/aston-martin-f1?utm_source=mailsignatur&utm_medium=email&utm_campaign=am_f1&utm_content=nn_en_email_aw ] 

	

[ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eposaudio.com%2F&data=02%7C01%7Cjocg%40eposaudio.com%7Cfd5ccfd9b0ab478a468b08d7bb59979b%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637183865770799008&sdata=BXMQynvX%2FuQWt3Zsuv3DB9h1nePJBhPUMMUDthkfJjw%3D&reserved=0 | eposaudio.com ] · Follow us here 	

[ https://www.facebook.com/eposenterprise ] [ https://twitter.com/eposaudio?lang=da ] [ https://www.linkedin.com/company/eposaudio/mycompany/ ] [ https://www.instagram.com/eposaudio/ ] [ https://www.youtube.com/channel/UCKZSbHA_gj3OKwPnKa4cNaA ] 

	

	

From: Pritish Nandi < [ mailto:[email-masked] | [email-masked] ] > 
Sent: 15. juli 2021 12:17 
To: Heta Nyrhinen (HNYR) < [ mailto:[email-masked] | [email-masked] ] > 
Cc: Sara Aknooni (SRAK) < [ mailto:[email-masked] | [email-masked] ] >; Saurabh Dadu < [ mailto:[email-masked] | [email-masked] ] >; deeksha < [ mailto:[email-masked] | [email-masked] ] > 
Subject: Re: Data Breach - 158952 

		

This message comes from outside of the corporate network. Please do not click links or open attachments unless you recognize the source of this e-mail and know the content is safe. 

Hi Heta, 

Working on it asap. 

Regards, 

Pritish 

From: "Heta Nyrhinen, HNYR" < [ mailto:[email-masked] | [email-masked] ] > 
To: "Pritish Nandi" < [ mailto:[email-masked] | [email-masked] ] > 
Cc: "Sara Aknooni, SRAK" < [ mailto:[email-masked] | [email-masked] ] >, "saurabh" < [ mailto:[email-masked] | [email-masked] ] >, "deeksha" < [ mailto:[email-masked] | [email-masked] ] > 
Sent: Thursday, July 15, 2021 3:44:20 PM 
Subject: RE: Data Breach - 158952 

Hi, 

Just to update that several customers’ personal data has leaked to [ mailto:[email-masked] | [email-masked] ] , who is not an internal employee. Could you please investigate urgently, how all these tickets got linked to his email address? He is contacting the impacted end users directly. 23 tickets have been connected to his account. Please make an overview of them. 

Best regards​​ 

Heta Nyrhinen 
Project Manager 
Global Support and Service 
+45 4470 0148 
+45 2213 1261 

EPOS Group A/S​ · Industriparken 27 · DK-2750 Ballerup · Denmark 

[ https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eposaudio.com%2Fenterprise%2Faston-martin-f1%3Futm_source%3Dmailsignatur%26utm_medium%3Demail%26utm_campaign%3Dam_f1%26utm_content%3Dnn_en_email_aw&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181563979%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=FYO56kWVIQJyA7wkVqOpsc3KYkM%2Fv2xeFT%2BTzPRzOu0%3D&reserved=0 ] 

	

[ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.eposaudio.com%2F&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181563979%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=7L5muk%2Fckf93Lm%2BmUD9ENfQ%2BHUogF5MnBKR5WmKhuVA%3D&reserved=0 | eposaudio.com ] · Follow us here 	

[ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Feposenterprise&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181573973%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=AizS4LqXcmtGm2O5ew0Dh%2FjL1%2BlFzhMHVM9%2FcehfvQo%3D&reserved=0 ] [ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Feposaudio%3Flang%3Dda&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181573973%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=wj3RDq6fgVNvsEIiiH8CZg1mjG4MYUimmFeNukdBw0M%3D&reserved=0 ] [ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Feposaudio%2Fmycompany%2F&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181583968%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=vX9nBWK2hAxJYMsc8eMHuLzMnYwPCf6zeE0UvMzMkR8%3D&reserved=0 ] [ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Feposaudio%2F&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181583968%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=JvTbhOaBoBanSyRzxS2KY2cbROcRlgKYu8s%2BQBWRRDg%3D&reserved=0 ] [ https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fchannel%2FUCKZSbHA_gj3OKwPnKa4cNaA&data=04%7C01%7Chnyr%40eposaudio.com%7Cf255001547344a153d8d08d94779ac0f%7C9bf8c7a8e00849a79e43ab76976c4bf8%7C0%7C0%7C637619410181593961%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=BS3QUvy5y1OqtvyHkN4iCjjPOX%2Baxi%2BqQp7yl0AwEBk%3D&reserved=0 ] 

	

	

From: Pritish Nandi < [ mailto:[email-masked] | [email-masked] ] > 
Sent: 15. juli 2021 08:32 
To: Heta Nyrhinen (HNYR) < [ mailto:[email-masked] | [email-masked] ] > 
Cc: Sara Aknooni (SRAK) < [ mailto:[email-masked] | [email-masked] ] >; Saurabh Dadu < [ mailto:[email-masked] | [email-masked] ] >; deeksha < [ mailto:[email-masked] | [email-masked] ] > 
Subject: Data Breach - 158952 
Importance: High 

		

This message comes from outside of the corporate network. Please do not click links or open attachments unless you recognize the source of this e-mail and know the content is safe. 

Hi Heta, 

We have identified a data breach after customer complaint. The employee responsible for the Data Breach is Grace where she merged a duplicate ticket (159145 ) from the same customer however forgot to 

remove the EPOS employee from CC who forwarded the request to us. Customer is now furious and wants a solution for this data breach. 

He is waiting for our response. 

For the employee we have issued a formal warning letter and also a financial penalty for this error. 

Regards, 

Pritish Nandi