Pennsylvania removes email database of public employees

[FakeNoose]

Spotlight PA link: https://www.spotlightpa.org/news/2023/09/pennsylvania-public-employee-email-search-removed/

HARRISBURG — Pennsylvania officials have removed a searchable, online database of state employee emails, narrowing the ways the public can reach the people who work for commonwealth agencies.

The state Office of Administration, which oversees cybersecurity for state government agencies, took down the directory in May because it posed a security risk, said communications director Dan Egan.

“Having every Commonwealth employee email address publicly available in a searchable directory represents a cybersecurity risk and is not a best practice since phishing emails are increasing in frequency and represent the number one threat vector Commonwealth employees face today,” Egan wrote in an emailed statement.

The state still provides an online phone directory of state employees, and department websites feature some general email addresses and contact forms for public use. The email directory launched in 2012, and gave the public a way to directly contact employees who work for various state departments.

- more at link -

Here's the link to PA state employees' online phone directory: https://www.dgs.pa.gov/About/Pages/Directory.aspx

If a state employee chooses to give their own email address, that's one thing. But having all the email addresses available publicly in a database listing - that's not a good idea. Too many cranks and crazies out there.

[RKP5637]

1. To me, that's a very smart move given the craziness and hostilities in the US at this time. n/t

[sinkingfeeling]

2. Every government and business will soon be taking this precaution.

[appalachiablue]

3. Smart move, thanks for posting.

[twodogsbarking]

4. Make Privacy Private Again.