A subscriber/ reader has access to my account stats
-
Hi. I received an email from a friend who is a reader/ subscriber of my site. She received my monthly stats with all the information of how my site performed. This was not a forwarded email seeing as I didn’t even receive this information. I’m worried. How did this happen and is my information compromised ? I attached the screenshot of the email she received down below . Please help
The blog I need help with is: (visible only to logged in users)
-
That definitely sounds unusual, but it doesn’t necessarily mean your site or data is compromised. In most cases, this happens when your site’s analytics or email plugin is configured to send summary reports to all users or subscribers instead of just the admin email.
Here’s what you can check:
- Identify the source of the email — Was it sent from WordPress, Jetpack, Google Analytics, or a plugin like Site Kit or MonsterInsights?
- Check plugin email settings — Log in to your WordPress dashboard → open the plugin that sends performance or stats reports → look for any “Email Reports” or “Recipients” section. Ensure only your admin email is listed there.
- Review user roles — Go to Users → All Users and confirm your friend doesn’t have an elevated role (like Editor or Administrator) that could receive analytics updates.
- Update passwords and revoke access tokens (just as a precaution).
Once you update the email settings, future reports should go only to you.
-
One of my colleagues sent you a follow-up email where you can feel free to respond.
For other folks who are following this thread, users who are invited as administrators will have access to Jetpack Stats and may receive monthly reports. For more information about what privileges an administrator role has, please refer to our guide here: https://wordpress.com/support/invite-people/user-roles/#administrator
- The topic ‘A subscriber/ reader has access to my account stats’ is closed to new replies.
WordPress.com Forums 