4

An email was sent with sensitive information to a group email address that includes all users in a company account. Is it possible to recall this email?

It was sent to an all@domain.tld, which is a group email. All company users are subscribed to that group. We use Gmail.

If it's not possible for the administrator to recall or delete the email, can the user who sent the email do it?

3

You can use the Security Investigation Tool to delete these messages from every users inbox. If you do not have G Suite Enterprise you can leveraging GAMADV-XTD Users-Gmail-Messages-Threads for this by issuing something like

gam all users delete messages query rfc822msgid:random-message-id-here@mail.gmail.com doit
0

You can actually do it with a GUI if you have Google Workspaces Enterprise using the Security Investigation Tool

Much like "crossing the streams" in Ghostbusters you can also do it with a documented series of commands GAM. Be very very careful with this as an improperly formatted command would likely result in all life as you know it stopping instantaneously and every molecule in your body exploding at the speed of light, or at the very least A LOT of deleted emails by mistake.

Syntax:

gam user <who> delete|trash|untrash messages|threads query <gmail search> [doit] [maxto<action> <number>]

Some Examples:

gam group facultystaff delete messages query "Subject: Fwd: bla bla bla" doit maxtomodify 5

gam user user@domain.org delete messages query "Subject: very secret documents" doit maxtomodify 5

gam all users delete messages query "rfc822msgid:CAD+g0fUfmNZZmYpcMDmECqZuok6KGkC_hP+qJA@mail.gmail.com>" doit

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.