Shortly after creating a new account recently (this may be coincidence) we had a report from one of our customer technician groups that they were suddenly able to see all accounts and all sites of other customers, not simply their own. There doesn't seem to be a connection between the two actions, but it happened almost seconds after saving the new account.

Has anyone experienced this, does anyone know what causes it and what needs to be changed to ensure it doesn't happen again? As you can imagine its a data breach, so not looking to ever create the situation again. I've logged this with ME support but its already been a week and i'm no further forward...