An generated email address that I only use only at #namecheap has just been used in a #phishing attempt on me. The address isn't listed in #haveibeenpwnd, which leads me to believe that #namecheap has had an undisclosed hack.
I’m not sure I get the logic here. The messages were signed, my (private) email address exposed. It would seem that both #namecheap’s and my information was obtained by the criminals?