Email address was leaked from Launchpad

Asked by hyper_ch

Hi there

I generate a new email address for every place I sign up so I can track where my email addresses get leaked. Today I got several spam emails to my launchpad email address, despite the email address set to not being disclosed to others:

Here's a copy of the spam email:

Return-Path: <email address hidden>
Delivered-To: *****@sjau.ch
Received: from localhost (localhost [127.0.0.1])
 by manager.roleplayer.org (Postfix) with ESMTP id 3E3229E41EB4
 for <email address hidden>; Sat, 30 Jun 2012 04:03:47 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at manager.roleplayer.org
X-Spam-Flag: YES
X-Spam-Score: 27.346
X-Spam-Level: ***************************
X-Spam-Status: Yes, score=27.346 tagged_above=1 required=4.5
 tests=[ADVANCE_FEE_2=2.294, ADVANCE_FEE_3=1.898, ADVANCE_FEE_4=0.001,
 FORGED_MUA_OUTLOOK=2.785, FREEMAIL_FORGED_REPLYTO=2.503,
 FROM_MISSP_MSFT=1, MILLION_USD=2.477, MISSING_HEADERS=1.207,
 MISSING_MID=0.14, MONEY_FROM_MISSP=1, RCVD_IN_BL_SPAMCOP_NET=1.246,
 RCVD_IN_BRBL_LASTEXT=1.644, RCVD_IN_PSBL=2.7, RCVD_IN_SORBS_WEB=0.614,
 RDNS_NONE=1.274, REPLYTO_WITHOUT_TO_CC=1.946, SPF_SOFTFAIL=0.972,
 SUBJ_ALL_CAPS=1.625, T_FROM_MISSPACED=0.01, T_LOTS_OF_MONEY=0.01]
 autolearn=spam
Received: from manager.roleplayer.org ([127.0.0.1])
 by localhost (manager.roleplayer.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id YAJa-ty8ks7T for <email address hidden>;
 Sat, 30 Jun 2012 04:03:45 +0200 (CEST)
X-Greylist: delayed 28812 seconds by postgrey-1.32 at manager.roleplayer.org; Sat, 30 Jun 2012 04:03:44 CEST
Received: from mail.minedu.gob.bo (unknown [190.129.71.76])
 by manager.roleplayer.org (Postfix) with ESMTPS id EE4E59E400CA
 for <email address hidden>; Sat, 30 Jun 2012 04:03:44 +0200 (CEST)
Received: (qmail 23131 invoked by uid 89); 29 Jun 2012 10:02:54 -0000
Received: from unknown (HELO User) (<email address hidden>@41.215.160.191)
  by mail.minedu.gob.bo with ESMTPA; 29 Jun 2012 10:02:53 -0000
Reply-To: <email address hidden>
From: "Mr.Joseph Ofori Teiko"<email address hidden>
Subject: ***SPAM***HELLO PARTNER
Date: Fri, 29 Jun 2012 10:02:24 +0100
MIME-Version: 1.0
Content-Type: text/plain;
 charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <email address hidden>

29/06/2012

Dear Partner,

With so much respect to you and with a good heart and the need to establish relationship with you I write you. I beg you not to regard this as a joke or as a contact to inflict harm on you. Please do consider this mail as one sent from a man who above all seeks peace, confidentiality and your assistance.

I have a proposal to make to you that will not bring harm to you in anyway. This proposal will bring immense financial gains to you and also put you in a position to manage a sizable financial portfolio. Note that I am contacting you because of the confidentiality I want to maintain in this regard. I would have contacted diplomatic affiliates in Europe, America or the Far East Asia but this issue requires contacting an individual that can handle issues quietly without making it public.

I am Mr. Joseph Ofori Teiko staff of CAL bank Ghana.I am contacting you in respect to a financial portfolio of Ten Million United States Dollars (US $10 Million) deposited in a security firm whose depositor died in mid 2007. As the Director, Treasury (International) Operations Unit,

I want to assure you again that this will not put you at risk or in danger in anyway. It is a quiet arrangement that will be strictly between me and you. I will introduce myself fully to you and give you the details of the proposal once I hear from you.

Kind Regards,
Mr.Joseph Ofori Teiko

Question information

Language:
English Edit question
Status:
Answered
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Curtis Hovey (sinzui) said :
#1

Your email address was leaked by some of the subscribers to bugs you reported or replied to. Some of the subscribers send their emails to public lists :( Google indexes Lp every few minutes...If Lp leaks an address, google finds it and we fix the origin. Searching for your address, we can see that Google does not know abut Lp, but I think the ubuntu-bugs team forward your emails to their public list for anyone to scrape :(.

Can you help with this problem?

Provide an answer of your own, or ask hyper_ch for more information if necessary.

To post a message you must log in.