
Microsoft and Google email defaults quietly failed and exposed sensitive patient data without warning anyone or logging anything
Experts warn emails sent with sensitive data are still getting delivered unencrypted, and no one gets notified Microsoft 365 sends email in plain text when encryption fails, without alerting the user at all Google Workspace still uses insecure TLS 1.0 and 1.1 without warning senders or rejecting messages Most users assume that emails sent through…