Ask HN: Someone is using my email to register to a bunch of services

I am posting some information here in case someone encounters this.

This seems like a type of DDOS attack to hide an email from a financial service.

All of these emails are essentially meant to hide the order of 850$ in the flurry of other emails.

Some information from a Google thread: https://support.google.com/mail/forum/AAAAK7un8RUCTPjR3thcdQ...

You can check something like https://haveibeenpwned.com/ to see if you can locate where the breach came from. Other than that you just have to assume the worst and start rotating all your passwords and keys. Turn on 2FA for everything.

I knew a guy who had a very common email address (like jsmith at popular provider), and it was pretty common for people to sign up to services using that address.

For well designed sites that require verification before the account is setup, just trash the message.

For other stuff, you may have to unsubscribe.

Worst case scenario for something like a dating sites or whatever, you can just reset the password, then login and delete/deactivate the account.

A credit freeze might be in order:

https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq...