View Single Post
Old 7 Aug 2022, 12:30 AM   #3
SideshowBob
Essential Contributor
 
Join Date: Jan 2017
Posts: 236
I don't see what he's getting at, "highly suggestive" of what?

If enough addresses of the form "someuser+amazon@..." appear in spam then that suggests that amazon has been breached. Alternately if a stolen database of unknown origin contained many such addresses it would suggest it came from amazon.

What he seems to be referring to is the the case where a known organization has been breached and the stolen database contains plus addresses referring to that organization. All that suggests is that the addresses belong to external users/customers.
SideshowBob is offline   Reply With Quote