Gmail has a security issue, BCC not working.

Earlier this morning, I needed to send an email to somebody so I log into my Gmail account using my web browser and the windows 10 computer not that should make any difference. I click on the link to compose a new email and I entered the recipient’s email into the to text box, then I click the button to reveal the CC and BCC fields. In the space for BCC, I enter two email addresses, one is mine and the second email is another email address that I have access to but it is my work email. After this, I then enter the subject, followed by the body of the email then click on send.

A few seconds later, I received a notification that I received an email so in my Gmail account I click on the email. I see that the email has been successfully sent but I noticed that the two emails in the BCC field is visible, then I login to my work email and I find the email I just sent a few moments ago and I see the email address addresses that are in the BCC field.

My understanding is the only emails that will be visible two all parties is any emails in the “to” space, or CC (carbon copy) field, but any emails addresses that are in the BCC field would not be visible to anyone, not even to the email address that is in the to space

so I entered their email address into the recipient text field. I also wanted to send an email to myself and one other email address, so I entered my email address and what other email address into the BCC (blind carbon copy) field , enter the subject in the body of the email and then click send.

A few seconds later, I receiving notification that I received an email which you able to email that I had sent, I open the email and I noticed that the email addresses that were in the BCC field is visible, I then looked to see the other email that was in the BCC field and sure enough I can see all of the emails that where in the BCC field.