A little over a week ago, Glassdoor began emailing its users to let them know of an update to the site’s terms of service. But rather than BCC’ing its anonymous reviewers, Glassdoor dumped their email addresses into a regular ol’ CC field, effectively outing at least 600,000 members of the site.

Now, one of those outed users is suing.

Melissa Levine, a Los Angeles-based television researcher, filed a class-action lawsuit against Glassdoor today, claiming the employment review site violated state law by including her email address in the CC field and exposed her to potential retribution from her former employers. A Glassdoor spokesperson said the company has not yet been served and therefore cannot comment on the case.

“That the strict anonymity of users on Glassdoor could be so carelessly and recklessly violated and cast aside in such an amateurish fashion should make us all question the extent to which Glassdoor places profit over people,” Ben Meiselas, an attorney for Levine, told TechCrunch in a statement.

Glassdoor encourages employees to review their current and former employers anonymously — users can’t view other reviews without first adding their own. Many of the reviews on Glassdoor are perfectly polite, but negative reviews often pop up, and it appears that Levine might have left a few unhappy reviews of her own.

The company acknowledged the mistake in a statement shortly after the terms of service email update was sent.

Here is a link to the rest of the article