Details on the upgrade: Essentially there was a sneaky way…

Details on the upgrade:

Essentially there was a sneaky way to view other people's inbox if you knew how the back end worked. No breaches were reported, preventative measure only.

Now each req uses mb token to validate user before returning any baemails.