Slightly concerning spam email
Discussion
I've just received a spam email - spam filter didn't catch it, and it ended up in my inbox rather than junk. It clearly is spam - it's from "order.shipped@digitalbarbers.com" (which I've not ordered from), the content looks like a Hermes delivery email (including a tracking number and a nice link I can click on to track my parcel), and it doesn't quite make sense (the title of the email says the order has been shipped, the top of the email content says it's been delivered, and the text says it will be delivered today). If I go to Hermes website (not via the link obviously) the tracking number is of course invalid.
The reason it's concerning is that it contains most of my address in the text as the delivery address. It doesn't include a house number - which suggests that they only had my postcode - but it does contain the correct road name, town, county and postcode.
Slightly concerned that whoever sent this has been able to find my postcode and link it to my email account.
ETA : And now I think I know why. It seems that one of the sites I use had a database breach on 25th March - and that site has my postcode, but no other address details. Guess I can expect a few more emails like that......
The reason it's concerning is that it contains most of my address in the text as the delivery address. It doesn't include a house number - which suggests that they only had my postcode - but it does contain the correct road name, town, county and postcode.
Slightly concerned that whoever sent this has been able to find my postcode and link it to my email account.
ETA : And now I think I know why. It seems that one of the sites I use had a database breach on 25th March - and that site has my postcode, but no other address details. Guess I can expect a few more emails like that......
Edited by davek_964 on Friday 6th April 10:42
Edited by davek_964 on Friday 6th April 10:45
It might be worth checking haveibeenpwned (and the password checker) to see if it could have come from any other breaches or if the password has been compromised.
theaxe said:
It might be worth checking haveibeenpwned (and the password checker) to see if it could have come from any other breaches or if the password has been compromised.
^^This
If you use the password you used for MyFitnessPal anywhere else you should change it.
Quick question on spam - thought I'd ask here rather than start a new thread. Occasionally get a spate of spam emails from people who are in my contact list. The email is always; <my first name> some URL (that I never click on) <contact's/sender's first name>. is this my contact list that has been hacked or is it my contact's address book which I happen to be on? Hope you see what I mean 
Asking out of interest really as it's been happening for years but I guess because I never open the URL they have no effect.
Asking out of interest really as it's been happening for years but I guess because I never open the URL they have no effect.
RichB said:
Quick question on spam - thought I'd ask here rather than start a new thread. Occasionally get a spate of spam emails from people who are in my contact list. The email is always; <my first name> some URL (that I never click on) <contact's/sender's first name>. is this my contact list that has been hacked or is it my contact's address book which I happen to be on? Hope you see what I mean
Asking out of interest really as it's been happening for years but I guess because I never open the URL they have no effect.
I assume it's the latter as I tend to get them from a small set of my contacts. Gmail generally filters them out.Asking out of interest really as it's been happening for years but I guess because I never open the URL they have no effect.
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff