Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All

Since December 2024 a security researcher who owns the domains noreply.us and noreply.net has unintentionally become a large-scale 'honeypot', receiving roughly 401,796 misdirected messages (about 700/day) from companies and organizations that send sensitive information to placeholder/no-reply addresses; the researcher alerts affected entities and presented the findings at Defcon, and there is no public evidence of malicious actors exploiting the data.