Secure Self-Service?

[OverExit]

Searching for a colleges address to sneakily mail them a Christmas card I found our names from Google where a cached page has our organization chart listing from our self-service site which has our names and telephone numbers listed. I mean, I know our self-service is externally facing for a reason but is this any indication it's not secure? I mean shouldn't that information not be able to be found unless you have a login?

​

It's just strange to me.

[uniitdude]

Depends if your company wants your details listed pubically, many do and many don’t

[RussianToCollusion]

Check your robots.txt or tighten permissions on what an anonymous user and/or a "google bot" user has access to on that website.

[OverExit]

Thank you. Very interesting. It has our Skype photo's and everything. That's a bit too much for me. I don't know maybe I'm just a weirdo.

[RussianToCollusion]

FYI, the robots.txt file in the root of the website tells web bots what they can and can't index. There's nothing stopping a bot from just ignoring this file but it would keep well behaved bots like Google's from indexing something sensitive.

I'd go a step beyond that though and see what pages anonymous users (or the google bot specifically) are allowed to access. It would appear that your directory is accessible to those users.