I used a brand new email alias when I created an account at pine64.com to buy the PineTime. Before Saturday, I had only ever received an email at that address from Pine64, regarding that order. On Saturday, I received an email at that address trying to sell me a 1st Anniversary Commemorative set of Riftbound cards. I don’t even know what that is.
Do you think they leaked some customer data or are they selling it?


Who would bother buying random email lists from companies (unless you clicked something when signing up)? Email lists aren’t worth anything
More likely a browser extension or your email host providing them
Just to add in the technical realm. It could also be a security vuln, a very common one through which the attackers get massive amounts of emails and that’d be shared with tens of thousands of other websites. Like, auto-harvesting through a vuln.
In any case no selling or leaking, that would just not work.
Yeah… That is definitely possible too… But… If it was a day after, its probably less likely.
A lot of websites also use systems like Postmark for outbound emails… so, it could also be one of those companies harvesting the data
Regardless of exactly how it happened, it appears I’m not alone and it is related to the Pine64 store. They need to button some things up on their end.