Affected versions

• Firefox 71.a01
• Firefox 70.0b8

Affected platforms

• Windows 10 x64
• Ubuntu 18.04 x64
• macOS 10.14

Prerequisites:

• Firefox is launched.
• The user is sign in to FxA using at least two uncompromised or compromised accounts
• The user is sign in to https://monitor.firefox.com/ with the same account.

Steps to reproduce

1. Access "about:protections" in a new tab and observe the Email address being monitored, Known data breaches have exposed your information and Passwords exposed across all breaches cards number.
2. Navigate to https://monitor.firefox.com/user/preferences and remove one email address via the trash icon.
3. Refresh the "about:protections" page.
4. Observe the Firefox Monitor cards: Email address being monitored, Known data breaches have exposed your information and Passwords exposed across all breaches.

Expected result

• The numbers are the same as on the Firefox Monitor page after the email was deleted.

Actual result

• The cards remain the same (the numbers indicate the same value as before the email was deleted).

Regression range

• This is a regression. I can't reproduce it on the build from 2019-08-17. I will try to find a regression range as soon as possible.

Additional information:

• It only refreshes after a while or after a restart.
• On Ubuntu, it happens even when adding a new email to the list.

Don't worry about the regression range, this would be due to the caching from Bug 1577035.
I believe this is acceptable, since if the user navigates to monitor via the link from the report the cache will be cleared. I think it is very unlikely they will behave as described.

This is a bug that we want to accept for now because as Erica mentions this is because of our cache implementation. The cache will only last for 24 hours and it will be cleared if the user clicks on the Monitor link, too. We'll still keep this open to gauge whether it's confusing to more users, in which case this might get picked up again.