2-Way Communication risk of data breach

Summary:

We've come across a situation with 2-way communication which could result in a candidate seeing unintended information as a result of 2-way communication feature.

A candidate sent an email to the vanity email address, and cc'd the hiring manager. The hiring manager wanted advice from the recruiters so replied from Outlook but removed the candidate's email address from the To field, and sent the email to the vanity email address, thinking it was just going to the Recruitment Team. Because their reply was part of the same email conversation started by the candidate, ORC received the message and sent it on to the candidate - even though their email address wasn't included.