I got a mail from Musicbrainz today (they’re the big composer, copyright, production credit database that radio stations & PRS/MCPS and other royalty collectors use). They had a big database breach and apparently my private personal details ’were seen’ in the breach
So it seems maybe there was some zero day vulnerability that got out and has been used in various places or hit various sites