<p>To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable.</p>

<p>The spam is bitcoin related and contains this text:</p>

<blockquote>
  <p>INVOICE #099425655</p>
  
  <p>STATUS: Unpaid</p>
  
  <p>GENERATE ON: 02/16/2015</p>
  
  <p>(link text) hxxps://account.[censored].net/?invoice=ST-231550-[random looking characters]-passport.[censored].net</p>
  
  <p>(actual link target) hxxp://russiancloud.esy.es/[censored].jar</p>
</blockquote>

<p>Given that the email address I used to sign up to the pool is, with very high certaincy, globally unique and not easily generateable, it would appear the pool indeed leaked some user data.</p>

<p>However, googling for "[name of pool] leak" gave no related results at all.</p>

<p>How should I continue?</p>

CC BY-SA 3.0
2016-07-27T06:15:10.217Z
I'm not sure this problem is specific to Bitcoin and you might be able to find similar topics on [security.stackexchange.com](http://security.stackexchange.com/).
Murch
CC BY-SA 3.0
2016-07-27T07:38:11.073Z
@Murch Yes, doubtlessly, there are similar topics on security SE - I was hoping for an answer more particular to the case, as it seems to me like the bitcoin ecosystem has its own dynamics consideration of which can improve the answer. I'm not sure, maybe that's not right. If the question is to be moved, it will probably be closed as a duplicate right away instead.
mafu
CC BY-SA 3.0
2016-07-27T15:55:35.170Z
mafu: You could always try shaming the pool on reddit. Topics like that do get some following.
Murch
<mining-pools><security>
How can I find out if a mining pool has been leaking user information?
mafu
# How can I find out if a mining pool has been leaking user information?

(Asked by: username_0 on 2016-07-25)

To my surprise, I have received spam to an email address which I exclusively used with a mining pool that seems to be generally considered trustworthy and reliable.

The spam is bitcoin related and contains this text:

> INVOICE #099425655
>
> STATUS: Unpaid
>
> GENERATE ON: 02/16/2015
>
> (link text) hxxps://account.[censored].net/?invoice=ST-231550-[random looking characters]-passport.[censored].net
>
> (actual link target) hxxp://russiancloud.esy.es/[censored].jar

Given that the email address I used to sign up to the pool is, with very high certaincy, globally unique and not easily generateable, it would appear the pool indeed leaked some user data.

However, googling for "[name of pool] leak" gave no related results at all.

How should I continue?

**Tags:** mining-pools, security

> **Comments:**
> **username_1**: I'm not sure this problem is specific to Bitcoin and you might be able to find similar topics on [security.stackexchange.com](http://security.stackexchange.com/).  
> **username_0**: @username_1 Yes, doubtlessly, there are similar topics on security SE - I was hoping for an answer more particular to the case, as it seems to me like the bitcoin ecosystem has its own dynamics consideration of which can improve the answer. I'm not sure, maybe that's not right. If the question is to be moved, it will probably be closed as a duplicate right away instead.  
> **username_1**: username_0: You could always try shaming the pool on reddit. Topics like that do get some following.  

---

## 0 answers

