Ask HN: Why would Google email me a data export for a different account?
12 comments
Google emails my address and recovery address when my takeout downloads are ready. I have bimonthly takeouts scheduled. I'm guessing that it is a spam attempt, or possibly just some idiot who set a misspelling as his backup account.
I agree that this is the most likely scenario. The rationale is to ensure awareness of an action that has risk of data exfiltration.
Though at this point, it's probably too late. :/
Though at this point, it's probably too late. :/
Posting it to HN is probaby reporting it to Google, in a manner.
Do you have MFA enabled?
I used to have issues with folks who'd obtain passwords to MFAless accounts and fuck around, but it's been a while since someone did... that.
Do you have MFA enabled?
I used to have issues with folks who'd obtain passwords to MFAless accounts and fuck around, but it's been a while since someone did... that.
MFA is enabled.
Oh, I guess a google person could see this, yeah.
Oh, I guess a google person could see this, yeah.
That's odd. TOTP, not SMS?
It's probably not you that's the problem either way but definitely odd.
Any of your devices acting like they have malware?
It's probably not you that's the problem either way but definitely odd.
Any of your devices acting like they have malware?
Yes, not the exact issue, but I get emails from Google on one account, although it is supposed to be sent to another account (both are mine)..
Some times it is regarding to Google store, so I tried to report that to customer service more than 3 times.. They were never helpful..
This is still happening to me, and it freeks me out every time I receive an email on the wrong account! I hope someone from google is reading this and willing to take action!
Some times it is regarding to Google store, so I tried to report that to customer service more than 3 times.. They were never helpful..
This is still happening to me, and it freeks me out every time I receive an email on the wrong account! I hope someone from google is reading this and willing to take action!
Feels to me like a new malware distribution scheme. Make it look like it’s the targets own files being delivered by Google.
After thinking about it a while I decided to send an email to the address that was included in the data archive email. Whether that was a good idea or not I don't know.
But! I got a 550 Requested action not taken response!
> Your message wasn't delivered to {redacted}@gmail.com because the address couldn't be found, or is unable to receive mail.
> 550 5.2.1 The email account that you tried to reach is disabled.
Kinda weird. But maybe it was disabled because that account was doing weird things?
But! I got a 550 Requested action not taken response!
> Your message wasn't delivered to {redacted}@gmail.com because the address couldn't be found, or is unable to receive mail.
> 550 5.2.1 The email account that you tried to reach is disabled.
Kinda weird. But maybe it was disabled because that account was doing weird things?
On the one hand, I want to encourage you to do a Takeout of your account, but given the circumstances, maybe that will make things worse. Either way, I'm a bit nervous for you!
Followup: I did do takeout recently and had to redo several times bc one of the zip files keeps "corrupting?". Me thinks they may have a queuing or race condition issues. Where it's obviously unable to maintain continuity in its endeavor.
Some ugliness with googl in general as they seem to foul up all the time. Although didn't get what you got, I did today receive a notice of Find My Phone which is tied to my most prized account and used ever so discreetly. So got into a small bit of panic. But the pain in the ass is getting a out of blue loud middle of the night announcement almost daily where one of my googl display would say, "hum...I didn't get that try again later" WTF? no one on my household said anything nor any of my automations triggered a thing during those times. Scares the sh*t of us hoping it didn't say that in our baby's room!!! Ugh! It's the little things that makes using Google's services so painful.
I didn't ask for a data archive.
I checked google takeout and it didn't list any completed exports.
I looked at the email and it seemed legitimate with one exception: when I looked at the link for downloading the data the url had the wrong email address in the query string.
After looking into this for a bit I then noticed that I also received an email from google about restoring access to a google account (that I received because someone provided this as the contact email address for an appeal, according to the email).
I can understand how the email about appealing for access might happen, but how/why would I receive an email about a data archive for the wrong account?
Has anyone seen something like this before? It's like someone thinks my email address is one of theirs?
I've changed my password just in case and am looking into how to report this to google.
Any next steps you'd recommend?