7 ms·

Same with me. I started to get spam from the email I used for a Portuguese airline. They didn't even respond.

by kwanbix 8mo ago

kolinko 8mo ago
always cc the local GDPR office when reporting such things
- fuzzy2 8mo ago
  They won't do anything. Had this exact scenario with two Shopify-based sites where my address somehow ended up with the second shop. Reported it, shop 1 investigated themselves and found themselves to be innocent, case closed.
  - firtoz 8mo ago
    Shopify shares these I think, no?
    - fuzzy2 8mo ago
      That would be illegal. I doubt Shopify are to blame here, it's more likely one of the gazillion plugins that every shop uses was the vector. Either way, it's highly likely the shop owner is the data controller, from a legal perspective. (Scenario: E-Mail address A with shop A, address B with shop B, then received a newsletter I did not subscribe to [already illegal] from shop B to address A. Only common data point: PayPal account.)
- deaux 8mo ago
  They'll just be incorporated in Ireland who are more than happy to be a haven for such criminals.
  - paulryanrogers 8mo ago
    Where can I read more about this?
    - deaux 8mo ago
      Just based on my comment the search query "Ireland compliance haven" would work, but for a more specific one, "ireland DPC big tech before:2026". The "before" is needed because else you'll only get news from a week ago exuberantly claiming that they're changing their behaviour. Handling of their cases [0]. Suing the EU when it instructs them to investigate Meta's breaches, rather than doing the investigation [1]. > Former Meta lobbyist Niamh Sweeney will co-lead the Irish Data Protection Commission from mid-October. [2] > A corporate lawyer who has worked for Big Tech played a key role in picking [her]. The DPC is the one responsible for going after GDPR violations. On the level of "Saudi Aramco lobbyist will co-lead the Environmental Protection Board". A lobbyist for the single worst offender in the entire world. You couldn't make it up. If you put it in a movie people would say it's too on the nose. [0] https://noyb.eu/en/project/dpa/dpc-ireland https://noyb.eu/en/project/dpa/dpc-ireland [1] https://iapp.org/news/a/court-upholds-edpb-s-authority-after-challenge-from-ireland-s-dpc https://iapp.org/news/a/court-upholds-edpb-s-authority-after... [2] https://www.politico.eu/article/big-tech-lawyer-key-in-picking-irelands-newest-privacy-commissioner/ https://www.politico.eu/article/big-tech-lawyer-key-in-picki...
Alive-in-2025 8mo ago
I've had multiple "big companies" leak my randomly generated email addresses. I create a unique one for each such account, like say my airline frequent flyer account for delta, and I've had several of those leak. blah1381812301.318719@somedomain.com would never be guessed.
herzzolf 8mo ago
Same, then later learned about TAP being breached. No disclosure from the company itself though...

Same with me. I started to get spam from the email I used for a Portuguese airline. They didn't even respond.

by kwanbix 8mo ago

Same with me. I started to get spam from the email I used for a Portuguese airline. They didn't even respond.

kolinko 8mo ago

always cc the local GDPR office when reporting such things

fuzzy2 8mo ago
They won't do anything. Had this exact scenario with two Shopify-based sites where my address somehow ended up with the second shop. Reported it, shop 1 investigated themselves and found themselves to be innocent, case closed.
- firtoz 8mo ago
  Shopify shares these I think, no?
  - fuzzy2 8mo ago
    That would be illegal. I doubt Shopify are to blame here, it's more likely one of the gazillion plugins that every shop uses was the vector. Either way, it's highly likely the shop owner is the data controller, from a legal perspective. (Scenario: E-Mail address A with shop A, address B with shop B, then received a newsletter I did not subscribe to [already illegal] from shop B to address A. Only common data point: PayPal account.)
deaux 8mo ago
They'll just be incorporated in Ireland who are more than happy to be a haven for such criminals.
- paulryanrogers 8mo ago
  Where can I read more about this?
  - deaux 8mo ago
    Just based on my comment the search query "Ireland compliance haven" would work, but for a more specific one, "ireland DPC big tech before:2026". The "before" is needed because else you'll only get news from a week ago exuberantly claiming that they're changing their behaviour. Handling of their cases [0]. Suing the EU when it instructs them to investigate Meta's breaches, rather than doing the investigation [1]. > Former Meta lobbyist Niamh Sweeney will co-lead the Irish Data Protection Commission from mid-October. [2] > A corporate lawyer who has worked for Big Tech played a key role in picking [her]. The DPC is the one responsible for going after GDPR violations. On the level of "Saudi Aramco lobbyist will co-lead the Environmental Protection Board". A lobbyist for the single worst offender in the entire world. You couldn't make it up. If you put it in a movie people would say it's too on the nose. [0] https://noyb.eu/en/project/dpa/dpc-ireland https://noyb.eu/en/project/dpa/dpc-ireland [1] https://iapp.org/news/a/court-upholds-edpb-s-authority-after-challenge-from-ireland-s-dpc https://iapp.org/news/a/court-upholds-edpb-s-authority-after... [2] https://www.politico.eu/article/big-tech-lawyer-key-in-picking-irelands-newest-privacy-commissioner/ https://www.politico.eu/article/big-tech-lawyer-key-in-picki...

Alive-in-2025 8mo ago

I've had multiple "big companies" leak my randomly generated email addresses. I create a unique one for each such account, like say my airline frequent flyer account for delta, and I've had several of those leak. blah1381812301.318719@somedomain.com would never be guessed.

herzzolf 8mo ago

Same, then later learned about TAP being breached. No disclosure from the company itself though...