From Amazon’s cloud collapse to Sony’s PlayStation Network catastrophe, it’s been one of those weeks, and it just got measurably worse: Imagine the personal info of over 21,000 New York Yankees ticket holders–names, account numbers, addresses and more–suddenly splashed around the Internet.
Or don’t, because that’s just what happened, reports bomb-dropper Deadspin.
(More on TIME.com: Sony Says PSN Credit Cards Encrypted, Not Personal Data)
It looks like either hundreds or thousands (the info varies) of Yanks fans got more than they bargained for when they checked email Monday evening. Attached to a routine newsletter emailed by a Yanks ticket rep was a little something extra–a spreadsheet titled “STL Homestand Newsletter (042511).” Open the spreadsheet and presto: the account numbers, names, addresses, email addresses, phone numbers, fax numbers, seat numbers, and ticket page codes of exactly 21,466 non-premium season ticket holders (the majority of stadium seats, in other words).
The no doubt mortified rep–a Microsoft Outlook user–quickly attempted to “recall” the email, but failed, since that feature only works if both sender and receiver use Microsoft’s Office email client.
The New York Yankees quickly apologized for the accidental info breach in a statement released to the press and distributed to ticket holders:
Please note, immediately upon learning of the accidental attachment of the internal spreadsheet, remedial measures were undertaken so as to assure that a similar incident could not happen again. The Yankees deeply regret this incident, and any inconvenience that it might cause.
The statement also stresses that “no other information was included” in the spreadsheet, and specified that no “birth dates, social security numbers, credit card data, banking data, or any other personal or financial information” were compromised.
(More on TIME.com: Some Of the Data Lost in Amazon’s Cloud Outage is Gone Forever)
While sites like Deadspin report the email was distributed to “thousands,” the New York Yankees claim it was in fact sent to “several hundred”–a bit less onerous, but given the file’s gone every which way since, not much.