Google app sharing exposes corporate data

What's up with Docs?

Published: 9 March 2009 15:51 GMT by Tim Ferguson

Tags: google docs, google

The security of Google Docs has been compromised after a bug caused documents to be shared with the wrong people.

The bug, which gave some Docs users access to documents they weren't entitled to view, occurred between people with whom the document owner, or a collaborator with sharing rights, had previously shared a document.

The problem - which affected around 0.05 per cent of documents on the service - was resolved on Friday.

In a statement Google said: "We have extensive safeguards in place to protect all documents, and are confident this was an isolated incident."

According to a blog entry by Google Docs product manager, Jennifer Mazzon, the problem only occurred on certain documents when people carried out a specific sequence of actions.

The bug struck when the document owner or collaborator selected multiple documents and then changed the sharing permissions. Google said spreadsheets were not affected.

In order to fix the issue, Google disabled the sharing rights for collaborators and viewers on affected documents and then emailed the users to let them know that they needed to reinstate their document rights.

Mazzon said the company was also affected by the bug internally and Google has apologised for the problem.

Business and personal users of Google Mail recently suffered a global outage of Google Mail service for several hours, causing some to question the wisdom of keeping so much data in the cloud.



Reader Comments (0)

Add a comment
Mobile working needs a security rethink

Mobile working needs a security rethink

How to stay safe on the move

Jack Straw asks for 'rethink' on data-sharing bill

Jack Straw asks for 'rethink' on data-sharing bill

Scrutiny digs up "justifiable concerns" with clause

'Phorm's questions will be answered': EC

'Phorm's questions will be answered': EC

"I suppose we are going to bring that to a positive conclusion"

Jack Straw asks for 'rethink' on data-sharing bill

Jack Straw asks for 'rethink' on data-sharing bill

Scrutiny digs up "justifiable concerns" with clause

'Phorm's questions will be answered': EC

'Phorm's questions will be answered': EC

"I suppose we are going to bring that to a positive conclusion"

Koobface tries to worm its way back onto Facebook

Koobface tries to worm its way back onto Facebook

Beware the way the cookie crumbles

Encryption demands: Ignored by quarter of MoD contractors

Encryption demands: Ignored by quarter of MoD contractors

'That information's Classified' (but not encrypted)

Cops "don't know one end of computer from the other"

Cops "don't know one end of computer from the other"

Can find criminals, can't find the any key?

Disgruntled workers pocketing company data on their way out

Disgruntled workers pocketing company data on their way out

Pot plant: check, family photos: check… client database: check

Conficker worm strikes again with fresh strain

Conficker worm strikes again with fresh strain

B++ tries to climb through Windows

£800: How much SMEs will lose to cybercrime

£800: How much SMEs will lose to cybercrime

Paper thin cost of online attacks


Quick Sitemap Links: