Topics Tools Books & Guides Talk to Securafy

Knowledge Hub / IT Operations

IT Operations

Data Breach Victims Get More Spam And Phishing Emails

Data Breach Victims Get More Spam And Phishing Emails

Randy Hall By Randy Hall Updated Nov 2025 2 min read Share

Do you feel as though you get a lot of spam mail? If so, you should know that you actually get almost a hundred times more than what you think you're getting.

However, most modern email systems (including Google's G-mail) do a spectacular job of filtering, which keeps the vast majority of it from ever reaching your inbox in the first place.

Even so, you probably get an annoying amount of spam, and one of the natural questions that arises from that is some variation of 'why am I getting so much of this junk?' Believe it or not, researchers now have an answer to that very question!

A research team from Stanford University recently partnered with Google to study more than a billion emails filtered by Gmail between April and August of 2020. They found one striking common thread: You are much more likely to receive spam emails if your email address was captured as part of a data breach. In fact, that fact alone makes you five times more likely to be targeted by spam email.

In some ways, that fact isn't terribly surprising. After all, spammers and scammers operate mostly from email lists and those lists have to be generated and compiled from somewhere. It turns out that the 'somewhere' is almost always a database captured during a data breach.

This, though, points to a simple defense. If you change your email address at about the same frequency you buy a new pair of shoes, you'll periodically give yourself a chance to start fresh.

Sure, there are some challenges involved with that, not the least of which is updating your contacts with your latest email address. Also, of course, if you have hundreds of contacts that might be impractical, but if you keep a relatively low profile on the web anyway, then occasional shedding one email skin for another is a very good way to keep spam to a minimum. At the very least, it's something to consider.

Join The Conversation

Have a question or perspective on this topic? Add it below.

Randy Hall

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

Writes about: Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

More From This Author →

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

  • Practical security tips from our Cyber Security Drip series
  • The Securafy Times, our monthly roundup on compliance and IT strategy
  • Occasional updates on new tools, guides, and research
  • No spam — unsubscribe anytime