> but then again I have no idea what "potential breach can't be tied back to the service" is meant to mean. Easy. Say I subscribe as "username+servicename@gma

> but then again I have no idea what "potential breach can't be tied back to the service" is meant to mean. Easy. Say I subscribe as "username+servicename@gmail.com" everywhere, when I get spam at that email address that service must have been either breached or sold off my data.