
Should You Change Your Email After a Data Breach?
The honest answer is usually no. Why a new address does not un-leak the old one, what actually protects you, and the two exceptions.

The honest answer is usually no. Why a new address does not un-leak the old one, what actually protects you, and the two exceptions.

DTU confirmed attackers used stolen credentials to enter its DTUBasen identity system. Up to 200,000 users: CPR numbers, names, work emails exposed.

Plus addressing is a filing trick, not privacy: some sites reject the plus sign, the tag strips off in one line, and your real address shows through.

Hana Bank confirmed hackers accessed its ODS support system, exposing 89 customers' emails, phones and national ID numbers. Transaction data was not taken.

No. The address lands in databases that leak, feeds the data-broker trade, and becomes the delivery address for spam and targeted phishing.

Welcome Savings Bank found evidence of a leak during a security review on 3 October. Up to 2,200 corporate contact records, and the fraud they enable.

A sudden spam spike is a symptom, not bad luck. The three usual causes, how to tell which one moved your address, and the one-glance fix for next time.

DIVD's volunteers hunt vulnerabilities for a living. DIVD says an AI agent stole their email addresses. Hand out addresses you can trace and kill.

Fakturownia's database was copied: invoice data, bank details, reported email addresses. The real risk is invoice fraud that looks exactly like your supplier.

One alias per site, switched off when a site leaks. Twelve practical examples of how to use email aliases, from online shopping to banking, plus where they stop helping.