How it was found

Summary: Dear Team,

I am finding bugs on this private program █████████ and after logged in with provided credential. I have search some peoples in the list and I have seen Hackerone's employee account there. Looking at H1 personal stuff some sensitive information are exposed like email addresses, meeting info etc ...

Steps to reproduce

1. Login ██████████ (if you did not have acc, please ask the program owner!)
2. Go to this person link ██████ - █████ (████)
3. You can see email addresse, meeting info via PoC below

█████

██████████

I am looking for other persons and will update information if I find something interesting IMO you should not use work email address on dev/test environment of partner!

Impact

Leaked some H1's employees email addresses