Can someone from Adobe Information Security please contact me?

[Mylah]

** Edit: I already have open ticket regarding this matter. Due to the summer shutdown at Adobe, I am reaching outside the normal channels for a response as I think they would want to act to correct this with some urgency. **

Still trying to migrate over Workfront users to the Admin Console...

While testing the setup of users at an external collaborator (a company that I presume also has its own Adobe org ID and new SSO set up) their unique usernames were exposed to us. Our Admin Console automatically converted their identity types from AdobeID to FederatedID and replaced their usernames from email addresses to the numeric (presumably confidential) usernames of their employees. This not only disconnected these employees from their data in our instance and broke their ability to log in, it's more than likely a mishandling of their confidential information by Adobe. My team should not be able to see their usernames, especially since there is no Directory Trust established and we didn't ask for one.  Is there someone on Adobe's InfoSec side who can contact me about this? 

[bjoern__koth]

Hi @Mylah 

please open a support ticket on this matter. I don't think anyone in here can help you out on that one.

[Mylah]

Thank you. I do have an open ticket with the Adobe Console migration team, where I've made them aware via ticket. I'm just casting a wide net here to get anyone from Adobe to respond to me; it appears most of my contacts are away due to the "Summer Shutdown" at Adobe. This is really their urgent matter.