Matt on Nostr: It's a legitimate password reset email. The problem is that they leaked email ...

It's a legitimate password reset email. The problem is that they leaked email addresses through the reset form. It exposed your email when the attacker requested a reset email for your Lightning address. No server access required. In fact, they didn't need to even compromise a system. Alby just gave it to the world.