Since you offer no useful evidence, yes, your "leak" hypothesis can be easily discarded. This site attracts many security professionals who probably, like me, give Brian a unique email address. So there would be better evidence of a compromise than your "actual sender" analysis. I know about Brian's work because I started getting spam to an email address I had only given to TD Ameritrade, and he was reporting on that cluster of a breach. That was back in 2007; you're breaking no new ground here. I respect him all the more for allowing your wild-goose-chase of a public accusation on his site. And I'm sure he'll be the first to report it if he ever *does* suffer from such a breach! 864eb8e8139b0378c2ff7198d859c7887a03852fade1ce6c9c256996d4422ca4