[HN Gopher] Ask HN: My full name and address are in a spam email...
___________________________________________________________________
Ask HN: My full name and address are in a spam email, sent to my
iFit mail alias
Sorry for the weirdly worded title, had to cram a lot in there
whilst staying below the char limit. My wife and I have been
subscribed to the iFit family plan for about three years. I just
received an obvious spam message, but the concerning thing is that
it was sent to the gmail alias I exclusively use for iFit
(myname+ifit.com@gmail.com), and the body contains my full name and
address. Luckily, the phone number is not correct.
https://i.imgur.com/U3vptQq.png Am I right to be a little freaked
out about this? Or is there a perfectly good explanation? Edit:
When I think about it there are quite a few ways this could have
happened. - iFit sold my data (unlikely but not unprecedented) -
My iFit account was compromised - My Bitwarden account was
compromised - My Gmail account was compromised - My computer was
compromised? - The data in the spam message was compiled from a
few different sources.
Author : appel
Score : 14 points
Date : 2023-03-27 19:51 UTC (3 hours ago)
| jonaldomo wrote:
| Not sure why you think it's unlikely, they told you they would in
| their privacy policy.
|
| "We may disclose or share your personal data to entities other
| than iFIT for a business purpose"
|
| https://www.ifit.com/privacy-policy
| appel wrote:
| Fair point. But email, full name and address? That does not
| seem sustainable for the long term to me.
| transcriptase wrote:
| More than likely iFit.
|
| I don't think they're doing so hot after the Peloton lawsuit, and
| anecdotally getting their support to answer a simple email takes
| months. My last conversation with them by phone basically ended
| with the agent saying "go ahead and initiate a charge-back with
| your credit card, because even though you should be refunded my
| hands are tied".
| notahacker wrote:
| Given the targeted nature of the email (fake fitness related
| invoice associated with email address used by fitness service) it
| looks like someone's ended up with a long list of iFit user
| details, almost certainly via illicit means
| appel wrote:
| Agreed, that makes the most sense to me too. Which, if true,
| would be pretty bad. Besides contacting iFit, any suggestions
| on how I should proceed (if at all)?
| DamonHD wrote:
| I think that you are right to be concerned.
| gloyoyo wrote:
| For sure.
| appel wrote:
| Oh, I am.
| frozencell wrote:
| Maybe the EU can do something for you?
| appel wrote:
| I'm in the US, unfortunately.
| ehPReth wrote:
| I had something like this happen with a VoIP provider (I don't
| quite know how to describe them, but they're like Twilio where
| you can 'code the phone' sort of thing) and my unique email
| address. Reported it to them out of concerns their system was
| breached, explained the unique email address situation and was
| given nothing but denial in return and ultimately got nowhere.
|
| Sucks, but I guess it is what it is :/. This was a while ago so
| it's fuzzy but I just ended up not using them anymore/not going
| forward with them.
___________________________________________________________________
(page generated 2023-03-27 23:02 UTC)