4 ms·

I use yourdomain@mydomain to sign up for accounts. name@mydomain is something I try to only give to friends. According to that site, my personal email has been

I use yourdomain@mydomain to sign up for accounts. name@mydomain is something I try to only give to friends. According to that site, my personal email has been leaked by Adobe, and by a bunch of shady database firms I've never heard of. (On further reflection, I probably used my Google account to log into Adobe, which leaks my personal email to the site I'm logging into.)

ShakataGaNai 6y ago
Most of those shady databases are data collectors. Sometimes I see those on domain wide reports for names even if the user never actually had that email address. Sometimes it's just a guess. Ex: You might see joe@mycompany.com in the report for those db, even though Joe Smith only ever had joe.smith@mycompany.com. And sometimes its legit scum collection. Some of the spam you get is just verify what email addresses work and what don't. If it doesn't bounce, you know you got a valid email address. Works for a lot of businesses (but not if you've got a personal catchall)