A limited number of customer emails have been leaked by an online cannabis retailer, leading some to receive spam phishing messages made to look like they’re coming from the business.
In a post on reddit, several users noted that after shopping with Cannabismo (formally cannarelief.ca) they were sent messages originating from an address attributed to Cannarelief asking them to check their account at an included link with the subject line “your account has been limited until we hear from you.”
In response, a spokesperson from Cannabismo wrote that since being alerted to the issue they had begun investigating.
“We can ensure you that your passwords are safe because we do not have access to them on our end,” the company stated. “No-reply@server.cannarelief.ca is a fake email and does not exist.”
Soon after, Cannabismo said that the issue was due to human error.
“One of [our] employees sent out an email by accident in the past with a list of 25 customers emails. Those are the customers that have been contacting us about this issue,” the statement read. “We did not send you these emails, or sell our email list.”