from Hacker News

Ask HN: Has MyFitnessPal sold customer data to Netflix?

by glawre on 3/24/20, 7:43 PM with 7 comments

Hi,

I am fairly convinced that MyFitnessPal have sold personal data to Netflix.

I use a unique email address for each online service - e.g firstname.surname+myfitnesspal@domain.com.

I recently received an email at this unique address from Netflix. The email is legitimate and is definitely not a phishing attempt.

I have never used this email for any service other than MyFitnessPal.

Has anyone else received a similar email? Does anyone know whether this is even legal? I'm an EU citizen and I did not give consent for this to happen.

Thanks

Here's a copy of the email:

"Hey there, We’re the customer service team reaching out to help our newest members get started with Netflix. If you’d like to chat before you start your subscription, you can call 1-844-505-2993 with any questions. Also, there’s a bunch of information in our Help Center, including answers to common questions about how Netflix works. If you’re all set, finish your account setup to start watching. If there’s anything you need help with, don’t hesitate to contact us. Cheers, Netflix Customer Service"

  • by andrejguran on 3/24/20, 8:50 PM

    Most probably because of this: https://securitytoday.com/articles/2018/04/03/under-armor-ad...

    Test your email here if it was leaked: https://haveibeenpwned.com/

    Also from the email it seems someone created an account. This is not a marketing email

  • by saluki on 3/25/20, 2:09 AM

    I had someone take over an old netflix account of mine, they said it's common for people in other countries to take control of a US based netflix account and even change the payment method to theirs. I'm guessing they get different content with a US based account.
  • by kapnobatairza on 3/24/20, 7:46 PM

    More likely someone created a trial account using that email address with a fake/stolen payment method.
  • by jrowley on 3/24/20, 10:58 PM

    I recently got an unexpected netflix marketing email too.
  • by hkiely on 3/27/20, 1:24 AM

    It has to be part of one of the leaks.