Email leaks like this one are extremely common. Even so, the ICO hands out fines for them.

This is because you can usually identify someone from their email address.

The leak was also avoidable. If Mike had known about CC and BCC, it probably wouldn’t have happened.

It sounds harsh, but not knowing enough about security can count as negligence. We’ll describe how to avoid Mike’s mistake on the next page.