> that meant each victim received three emails from us in under a minute:

> Verify your email address > Welcome to Suga > Reset your password > Three emails they never asked for, from a product they may never have heard of. We were just one of potentially hundreds of sites being hit at the same time.

@homelessdino

Why would you send welcome and reset to some victim that DID NOT verify?