We have come across a problem where email addresses are linked to multiple users causing communication and sensitive information being sent to the wrong person.
I have checked the db and found that the table ost_users, example, user x and y has the same default_email_id even though they are completely different people.
See below:
select o.id, o.default_email_id, name, e.address from ost_user o
inner join ost_user_email e on e.id = o.default_email_id
where o.default_email_id in (
select default_email_id from ost_user
group by default_email_id
having count(id) > 1
) order by default_email_id;
