“Many people reveal details about their personal lives in an OOO — like where and when they’re traveling,” Tim Sadler, CEO of Tessian, explains in an email interview. “Whether done on social media or in an auto-reply message on email, this arms hackers with the information they need to either craft a convincing email targeted at the OOO employee or impersonate the person who is on vacation and target one of their colleagues.”
Work LifeWork LifeWhy leaders aren’t powerful without this 1 thingWork LifeThis is what’s really behind the Great ResignationWork LifeWhy people believe false information and how to combat it, according to experts

I had a colleague who simply never answered her phone or set up her voicemail. She still listed the number on her business card and email .sig, she just never answered or checked voicemail. When she took a new job another colleague inherited her phone number and when he went to set up his voicemail there were basically eight years’ worth of messages left for her that he had to delete.
You don’t have to stop using OOO messages. Instead, they need to be used wisely. It’s okay to suggest an alternate contact while you are unavailable or add a date when you will be back in action. Just skip the details about why you set up the out of office message. No one needs to know that your son is getting married in Paris. Remove any personal details in that message, including personal cell phone numbers or an alternate email where you can temporarily be reached.