资安研究员 Cory Solovewicz 每天收到大量非预期的电子邮件。自从他购买了 noreply.us 和 noreply.net 等网域后，已经收到了超过四十万封邮件。这些信件并非一般的垃圾邮件，而是许多企业和组织在无意间外泄的敏感资讯，包含用户个资、内部凭证与商业机密。（关键数字：400,000）

这种情况的发生，主要是因为许多公司在系统设定时发生错误，他们会将邮件发送到这些看似无人使用的预设网域，误以为这些信箱不存在或无人监控。另一位研究员 Mike Sheward 也遇到了类似的状况，他在购买了 deleteduser.com 网域后，同样收到了大量包含私人订单、工作休假纪录甚至监控影像的机密信件。

为了防止这些敏感资料落入骇客或恶意攻击者手中，这两位研究员已经买下了数十个类似的网域以进行保护。他们积极地向受影响的公司发出警告，呼吁这些企业应尽快审查并修正内部系统的错误，避免持续外泄员工与客户的隐私资料，尽管有些公司的回应并不积极。

Security researcher Cory Solovewicz receives a massive amount of unexpected daily emails. Since purchasing domains like noreply.us and noreply.net, he has received over 400,000 messages. These emails are not typical spam, but rather sensitive information accidentally leaked by businesses and organizations, including personal user data, internal credentials, and company secrets.

This situation occurs primarily because many companies misconfigure their systems, sending emails to placeholder domains under the false assumption that they do not exist or are unmonitored. Another researcher, Mike Sheward, encountered a similar issue; after purchasing the domain deleteduser.com, he also received a flood of confidential emails containing personal orders, work vacation records, and even surveillance images.

To prevent this sensitive data from falling into the hands of hackers or malicious actors, these two researchers have purchased dozens of similar domains for protection. They are actively issuing warnings to the affected companies, urging them to audit and fix their internal system errors to stop the ongoing leakage of employee and customer privacy data, even though some companies have not been responsive.