Always has been.

But for real, this month alone i got two emails from two different services saying their third-party service got unauthorized access to the customer database and all the info related got extracted.

First was a recent hotel booking i made, where scammers got info on name, address, contact number and BOOKING DATES, where scammers could make less tech-savvy clients get phished if they did it clean. They didn’t get me because their WhatsApp profile was botched.

Second was a freaking motorcycle rental company which I used a year ago. Most likely they leaked my driver’s license info plus all the usual data you provide.

Multiply every service you use throughout the whole holidays for 5 years (under GDPR law) that they can mantain data about you and how they can get phished any second of any day and you might aswell just expose your personal data yourself and save the hassle.