My Stack Exchange profile has a specific e-mail address that I use on no other Internet site, and should be unguessable. My Developer Story is set to private. My profile has an uploaded image, not using Gravatar.
Despite having taken reasonable precautions to preserve my privacy, I received unsolicited commercial e-mail from
firstname.lastname@example.org on 2016-12-21 and
email@example.com on 2017-01-11. Both messages were advertising products and events to a general audience, not directed personally to me. They were also "profesionally" sent from the mail servers of a marketing firm called Marketo, with DKIM signatures from both
s=m1; d=tibco.com and
How did they obtain my e-mail address? Has Stack Exchange been hacked or phished? Was there a rogue employee or moderator?
I believe that this is not a duplicate of…
- Someone contacted me by email but my email is not public, because the accepted answer states that the Data Explorer leak has been plugged.
- Contact from wizpert.com via stackoverflow? or Annoying E-Mails: Where did they get my mail-address?, because my e-mail address is unique to Stack Exchange and is not used on any other site.
- (How) should I report someone abusing data from Stack Exchange for spam?, because I'm not using a Gravatar, and because I suspect that this e-mail harvesting was a "big" job, based on the nature of the message.