ESRB Leaks Email Addresses of Those Concerned About Online Privacy, Then Apologizes

6
During the commotion over Blizzard's ill-fated plan to use real names on its forums, around 1000 individuals emailed the Entertainment Software Rating Board (ESRB) at "privacy@esrb.org" for more information, updates, and to generally voice their concerns.

Last night, in a moment of (not) irony, the ESRB replied to all of these people without blind-carbon-copying the bunch, revealing the e-mail addresses of these privacy-concerned people for all to see.

The purpose of that email was to inform these concerned citizens that Blizzard had abandoned its plan to force official forum participants to have their real names linked with their posts.

The ESRB has since apologized, placing the blame on "one of [their] employees." The apology has been provided below, via Joystiq.

Yesterday we sent an e-mail to a number of consumers who wrote to us in recent days expressing their concern with respect to Blizzard's Real ID program. Given the large number of messages we received, we decided to respond with a mass e-mail so those who'd written us would receive our response as quickly as possible - rather than responding to each message individually, as is our usual practice. Through an unfortunate error by one of our employees, some recipients were able to see the e-mail addresses of others who wrote on the same issue. Needless to say, it was never our intention to reveal this information and for that we are genuinely sorry. Those who write to ESRB to express their views expect and deserve to have their contact and personal information protected. In this case, we failed to do so and are doing everything we can to ensure it will not happen again in the future.

The fact that our message addressed individuals' concerns with respect to their privacy underscores how truly disappointing a mistake this was on our part. We work with companies to ensure they are handling people's private information with confidentiality, care and respect. It is only right that we set a good example and do no less ourselves.

We sincerely apologize to those who were affected by this error and appreciate their understanding.

Sincerely,

Entertainment Software Rating Board

Interestingly, Blizzard's Real ID system has been certified by the ESRB's Privacy Online Program, which focuses on privacy, not anonymity. Ars Technica notes that Blizzard's Real ID program passes the agency's test because it was opt-in, required the registrant to be 18 or older, and fully disclosed what it would collect and do with any personal information.

Real ID will still be an option in-game for StarCraft II, World of Warcraft, and the upcoming Diablo III offering cross-game chat and Facebook integration of some form. It will, however, expose a player's real name to his or her friends and the friends of his or her friends. It is completely optional.

From The Chatty
  • reply
    July 13, 2010 4:15 PM

    Goes to show you why showing your real name on a forum should of never came up. People don't even know how to use email properly.

    • reply
      July 13, 2010 4:35 PM

      It's pretty challenging to fail this hard. Still - I have to give props because they fully accepted the blame and actually went on to explain why such a mistake was so potent coming from them. Accountability is rare these days. Bravo.

      • reply
        July 13, 2010 4:53 PM

        Accountability is rather prevalent with such widespread public matters such as this. Normal damage control here.

        Also it's challenging to fail this hard? In the real world at regular offices where people are told how to do their job this happens all the time. Most people don't even know the differences between CC and BCC. Some don't even know what CC means.

        You'd be surprised at how many large corporations have people in middle management who don't really understand math past the grade 6 level (at later parts in their life) or know what the fuck "PC Load Letter" means. They're getting better. Google is to thank for answering questions they're embarrassed to ask.

        • reply
          July 13, 2010 5:48 PM

          The average person only has one email address, their work email address. They don't have Hotmail or Gmail or Yahoo or anything else, they have one email address and that's their work email address. And when they switch jobs, they switch email addresses and everyone has to update their lists.

          And when they're not at work, email does not exist. You send them something at 5:01 PM on a Friday and you're not getting a response from them until Monday morning.

          And they only know how to use one button, "Reply All". They don't know what the difference between "Reply" and "Reply All" is, all they know is that they once used "Reply" and the person they intended the message for didn't get it, so they just use "Reply All" because that works every time.

        • reply
          July 14, 2010 8:55 AM

          People not knowing what "PC Load Letter" means is why it's important in the first place, and why it's become such an example of bad UI. Why on earth would you criticize people for that?

Hello, Meet Lola