So....I got an email from runningwarehouse about updating their TOS but instead of BCC'ing they exposed hundreds of emails which I assume is their customer base. Because of how people pick emails these days you can make out their real identity of some of those emails as well. And in some cases where they work so you could with some relative confidence know where they live.
GDPR violation?