<oembed><type>rich</type><version>1.0</version><title>Matt wrote</title><author_name>Matt (npub1l6…uj5rc)</author_name><author_url>https://yabu.me/npub1l6scds4yv7xmcsmhqnhdy9sggm520q09lvts2m5mkvecgr2mmmeqsuj5rc</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>It&#39;s a legitimate password reset email. The problem is that they leaked email addresses through the reset form. It exposed your email when the attacker requested a reset email for your Lightning address. No server access required. In fact, they didn&#39;t need to even compromise a system. Alby just gave it to the world.</html></oembed>