Since the Personal Genome Project UK was announced in November 2013, approximately 10,460 people registered to be notified when enrolment opens.
On Saturday the 17th of May 2014 at 8.42pm, the Personal Genome Project UK staff sent an email to this list of registrants, announcing that enrolment was now open and providing instructions on how to begin the online process.
Just before midnight on Saturday, one person replied to the email. Due to a configuration error, this email message, including this person’s name and email address, was sent to the entire mailing list, even though the message was intended only for the Personal Genome Project UK staff.
Within a few hours, approximately 220 people replied to the email list in a similar manner. Each reply, along with the sender’s email address and any other content in the message, including possibly full name, was sent to the whole list of registrants, thus setting off an “email storm” that filled the inboxes of people on the list.
Upon realizing that a mistake had been made, Personal Genome Project UK staff held an emergency meeting and immediately began working to solve the problem. By 2AM on 18th of May 2014 the misconfigured email address was turned off.
Personal Genome Project UK staff deeply regret any distress this incident may have caused. The staff is investigating the email configuration error and is taking steps to ensure that this problem never happens again.
[Update] An apology email was sent to the PGP-UK mailing list on 23 May 2014.
Was my name or email address mistakenly shared with other members of the PGP-UK mailing list?
The vast majority of names or email addresses were not exposed during this incident. However, if you are one of the ~220 individuals who sent a message to the email list (email@example.com), your email address, possibly your name, and any contents of your email message were visible to the entire list of registrants.
How do I remove my name and email address from the mailing list?
Please send your request for removal to us at: firstname.lastname@example.org. We will remove you immediately and you will no longer receive communications from us.