As part of the process to synchronize a production environment with a staging one, I run a script that, among other things, either deletes all customer emails or changes them to fake emails under my domain. Just another option for minimizing the risk of a leak without having to change configuration values or use other services.
I had to learn doing this the hard way - fortunately not because of a security leak, but rather, duplicate emails would be sent to customers (one from production and one from staging).
As part of the process to synchronize a production environment with a staging one, I run a script that, among other things, either deletes all customer emails or changes them to fake emails under my domain. Just another option for minimizing the risk of a leak without having to change configuration values or use other services.
I had to learn doing this the hard way - fortunately not because of a security leak, but rather, duplicate emails would be sent to customers (one from production and one from staging).