Google Groups containing hundreds of University communications and associated documents with restricted, confidential, or otherwise sensitive information had misconfigured permission settings such that anyone who could access the Boston College G Suite could view them. The Heights withheld publication of this article until a wider fix was implemented before that change could have made other institutions that use G Suite more vulnerable. Google instituted a platform-wide modification of the G Suite on March 19 that allows administrators to modify the default privacy settings for all newly created Google Group mailing lists.”]
Source: https://www.bcheights.com/2018/04/09/google-groups-misconfiguration-sensitive/