My wife and I have been subscribed to the iFit family plan for about three years. I just received an obvious spam message, but the concerning thing is that it was sent to the gmail alias I exclusively use for iFit ([email protected]), and the body contains my full name and address. Luckily, the phone number is not correct.

https://i.imgur.com/U3vptQq.png

Am I right to be a little freaked out about this? Or is there a perfectly good explanation?

Edit: When I think about it there are quite a few ways this could have happened.

- iFit sold my data (unlikely but not unprecedented)

- My iFit account was compromised

- My Bitwarden account was compromised

- My Gmail account was compromised

- My computer was compromised?

- The data in the spam message was compiled from a few different sources.