ESRB accidentally exposes emails of Real ID complainers

In what can only be classified as an Epic Fail of the Ages, the Entertainment Software Rating Board (ESRB) has accidentally released the email addresses of about 1000 people who filed a complaint regarding last week’s fiasco involving Blizzard’s intentions to use posters’ real names in their forums via their Real ID system. Blizzard quickly rescinded this policy due to the gargantuan backlash that ensued.

When the news first hit, many people filed a complaint with the ESRB, hoping that the organization may get Blizzard to back down. The ESRB has long been known for heavily supporting online privacy rights, so it made sense that they would be contacted.

Here is the mass email they sent out to those who contacted them.

Thank you for contacting the Entertainment Software Rating Board (ESRB) regarding the policy recently announced by Blizzard Entertainment which would have required participants in its official forums to post comments using their real first and last names, and for expressing your concerns regarding potential privacy implications.

It is our understanding that Blizzard has provided an update announcing that it will not be implementing the above-referenced policy with respect to its forums, and users will not be required to post using their real names. You can read Blizzard’s announcement regarding this most recent development at http://forums.worldofwarcraft.com/thread.html?topicId=25968987278&sid=1&pageNo=1.

Separately, if you have questions regarding Blizzard’s implementation of its Real ID option — which by our understanding is unrelated to Blizzard’s plans for its forums — and/or the new capabilities this option offers, they will likely be answered by reviewing the information posted at http://www.battle.net/realid/.

ESRB, through its Privacy Online program, helps companies develop practices to safeguard users’ personal information online while still providing a safe and enjoyable video game experience for all. We appreciate your taking the time to contact us with your concerns, and please feel free to direct any future inquiries you may have regarding online privacy to our attention.

Regards,

Entertainment Software Rating Board

Unfortunately, it appeared that whoever was in charge of sending this official email didn’t know the difference between CC and BCC, or perhaps was distracted. Thus the email was sent out with nearly 1000 email address exposed, a hearty list aching to be sold to the nearest spammer.

Irony, thy name is ESRB.

Fortunately, it appears that not everyone who wrote to the ESRB about the Blizzard situation was caught in this mess. Several commenters on WoW.com revealed that their email was BCC’ed. I’m guessing that there were thousands of filed complaints and responses were done in batches. However, some commenters also said that they received two copies of the email – one that was CC’ed and a subsequent one that was BCC’ed.

Site [ESRB] Read [WoW.com] Read [Kotaku]