“For example, if a hacker knows that the chief financial officer of a company is OOO, thanks to the information in the auto-reply message, an attacker could impersonate the CFO on email and target another individual in the company’s finance team asking them to make a payment or update bank details for them while they are offline,” says Sadler.
I wrote the above comment off the top of my head. I wish I had time to rewrite and edit it. I would have changed “their goldfish” to “a spider they accidentally stepped on”, and would have added more detail to the story of the sister’s death (e.g. “her Pomeranian yapping” rather than the less descriptive “her dog barking”). Unfortunately, I could not do the thorough writing job required for that comment because someone close to me recently … – The person whose out of office advertised his gig on the weekend, for anyone in travelling to [city] – The people in a certain department who have taken to saying things like “if you really need to contact me, call 000-YYY-XXXX where Y is the square root of [insert numbers] and X is the year plutonium was discovered.” – The ones where people have an auto response saying they only check their emails once a day between 1-2pm – “I’m on research leave and I may be slow to reply.” (Whereby it is guaranteed they will reply immediately, because academics do not *really* take breaks).

I would very much like to meet him, and I don’t know if that proves or challenges his point…
I once emailed someone I barely knew to check on some materials he was supposed to send my boss and I received an auto-reply letting the world know that he was away in Vegas with his “boyz” to celebrate his divorce. I still don’t know why he felt this was important to share with business contacts. “I’m away for the week” was all the information I needed.