Pennsylvania removes email database of public employees [View all]
Spotlight PA link:
https://www.spotlightpa.org/news/2023/09/pennsylvania-public-employee-email-search-removed/
HARRISBURG Pennsylvania officials have removed a searchable, online database of state employee emails, narrowing the ways the public can reach the people who work for commonwealth agencies.
The state Office of Administration, which oversees cybersecurity for state government agencies, took down the directory in May because it posed a security risk, said communications director
Dan Egan.
Having every Commonwealth employee email address publicly available in a searchable directory represents a cybersecurity risk and is not a best practice since phishing emails are increasing in frequency and represent the number one threat vector Commonwealth employees face today, Egan wrote in an emailed statement.
The state still provides an
online phone directory of state employees, and department websites feature some general email addresses and contact forms for public use. The email directory launched in 2012, and gave the public a way to directly contact employees who work for various state departments.
- more at link -
Here's the link to PA state employees' online phone directory:
https://www.dgs.pa.gov/About/Pages/Directory.aspx
If a state employee chooses to give their own email address, that's one thing. But having all the email addresses available publicly in a database listing - that's not a good idea. Too many cranks and crazies out there.