Ask HN: Email leaked while traveling abroad?

I am an American who recently visited Europe for a vacation. I visited several countries and ended the trip in Germany. Within a week of getting back home I received an email that was in German to an email address that I have never used in a web form and have only used a few times for emailing someone (back in 2017). The email address has received zero inbound emails except for this one.

This is on Fastmail where I have dozens of email addresses that are context based and then to take it even further I almost always use an on-the-fly alias. I have never received an email to the email address in question which I've had for 10 years except for this one instance immediately after visiting Germany.

I traveled with a Verizon locked iPhone 17 and had Verizon international add-on. My phone has nearly no apps on it with the exception of the iOS Fastmail app and a few small open source non-bloated apps.

I do not believe this is a coincidence. Any thoughts on what took place, how this happened?

Additional thoughts and clarification: 1. I checked the raw message and it was indeed sent to an email address that I've never used in a web form and have never received an inbound email to. 2. The email address in question is very unique and isn't something that could potentially just be guessed by spammers. 3. I haven't received an email to this email in question since. 4. The email address in question I have never used an on-the-fly alias (<alias>@<user>.<domain>.<tld>) 5. I didn't click on the link in the email but it looks to be a transactional email originated with Amazon SES to verify my email address. Subject and body is 100% in German including address information, UID (tax id?) number, etc.

17 points | by thatonehack 1 day ago

7 comments

  • montroser 22 hours ago
    The contact list of the person you emailed in 2017 was obtained by a spammer, who then sent you spam.
    • ycombinatrix 15 hours ago
      Doesn't explain why the email was in German.
      • montroser 13 hours ago
        Could very well be apophenia. Germany was just one of the countries visited, and we all get spam in a variety of languages all the time, including German.
    • chinathrow 22 hours ago
      Either this, or Fastmail was compromised recently and more will find out soon.
    • Transformanshen 20 hours ago
      I think so too
  • AlisaYoki 7 hours ago
    Could there have been some kind of data leak involving German companies? I mean, the services track those who are in Germany and leak their data.
  • csomar 13 hours ago
    How many aliases do you have? If this is the only one, then I'll be more suspect this is a fail on your end or the guy you sent a message to.

    Also, I don't see the connection to Germany?

  • totallygeeky 23 hours ago
    I don't have much to offer unfortunately, but I will say I've had an uptick on spam/unusual emails to my fastmail as well, including to some aliases. I'm wondering if there's not some way actors are searching out masked aliases, or are able to bruteforce combinations?

    Just throwing shit at the wall however, no definitive proof one way or another.

    • csomar 13 hours ago
      There are no combinations. The aliases are make-do in fastmail backend. If you have a domain, you theoretically receive all emails sent to that domain (*@domain.com)
  • rishitasharma36 13 hours ago
    [flagged]
  • portagescout 16 hours ago
    [flagged]
  • aaron695 19 hours ago
    [dead]