Embed Notice

I'm skeptical to call stuff like this a data breach. If you enable the setting to allow people to find your account via your email or phone number, then people can find your account via your email or phone number. Yes, ideally the platform should prevent simply bruteforcing random email addresses and phone numbers to correlate them to accounts, but this is expected behavior. With enough resources you can always perform such correlations regardless.