> that meant each victim received three emails from us in under a minute:

> Verify your email address > Welcome to Suga > Reset your password > Three emails they never asked for, from a product they may never have heard of. We were just one of potentially hundreds of sites being hit at the same time.

@homelessdino

Why would you send welcome and reset to some victim that DID NOT verify?

This is being addressed in the article. The service no longer does this, and he apologizes.