Andy Rubin apologizes for email, misconfigured as a group message, sent to Essential customers requesting personal info, like DOB, to which ~70 replied
now it might have accidentally phished them Sam Rutherford / Gizmodo : Essential's Shipping Issues Have Gone From Bad to Train Wreck Sean Hollister / CNET : Essential admits it accidentally leaked customer info MacDailyNews : In colossal screw up, Essential shared customers' driver's licenses over email David Matthews / TechSpot : Essential customers hit with phishing e-mails Steven Parker / Neowin : Dozens of Essential customers fuming as email containing personal info is openly shared [Update] Eric Abent / SlashGear : Essential just made a huge mistake with personal customer info Mix / The Next Web : Essential Phone customers are being blasted with phishing emails Peter K. / PhoneArena : Essential Phone phishing scam: Wrongdoers try to steal customers' sensitive data through email Evan Selleck / Android and Me : Essential Phone buyers being targeted by phishing scam Harish Jonnalagadda / Android Central : Essential ‘phishing attack’ was just sloppy email practice [Updated] Tweets: @essential : We're aware of & looking into a recent e-mail received by some customers. We've taken steps to mitigate & will update with more info soon. @meganmorrone : The Essential Phone has no logos, but in exchange they get to send your drivers license to everyone. http://www.theverge.com/... Quinn Nelson / @snazzyq : Pretty lame resolution. At least Rubin apologies and admits fault. Didn't answer why @essential is asking for photo IDs to confirm orders... http://twitter.com/... Martin Bryant / @martinsfp : This is exactly what you don't want to do when you're building a major new consumer electronics brand. http://twitter.com/... Todd Haselton / @robotodd : Not a good look for a company trying to get established with customers http://twitter.com/... @essential : A note from Andy Rubin: https://www.essential.com/... Ina Fried / @inafried : Essential's @Arubin “Being a founder in an intensely competitive business means you occasionally have to eat crow.” http://www.axios.com/...
Context & Ripple Effects
Essential's customer-data stumble lands at a company that entered the market without a communications bench: its VP of marketing and head of communications both left before the first product shipped, leaving founder Andy Rubin as the public face handling fallout like this one.
The misconfigured group email asked customers for personal details such as date of birth, and roughly 70 replied — meaning their responses, reportedly including driver's licenses, went to the whole recipient list, with phishing emails following.
First-order effects
- About 70 customers who answered the email had their personal information — DOB and reportedly driver's licenses — exposed to every other recipient, and phishers immediately began targeting them.
- Andy Rubin personally owns the apology, absorbing reputational cost that would normally sit with a communications lead the company no longer has.
Second-order effects
- Trust damage compounds on commercial weakness: IDC counted just 88,000 phones shipped in the first six months after launch, so a privacy scare gives hesitant buyers another reason to skip Essential's first device.
- Support and security teams now carry remediation work — fielding worried customers and containing the phishing wave — on top of the shipping problems outlets were already covering.
Third-order effects
- For hardware startups, the episode illustrates how thin early-stage operations turn routine mistakes into brand-level crises when founder-led messaging replaces professional comms and data-handling discipline — a structural risk that outlasts any single apology.
The trend: Founder-run hardware startups are discovering that without dedicated communications and data-security operations, operational errors convert directly into brand erosion during the fragile launch window.