You can do something similar with fastmail. Get a domain for your email and make an alias address of the form [anything]@[alias].domain.com . You can then make 'sending identities' for an instance of that catchall domain for the rare time you need to send email as [email protected] . You can also create rules to blackhole a specific alias email or whatever you want when you need to invalidate the email.

Fastmail also have tons of alternative domains like nospammail.net so you can make your registering emails in a domain that is separate from you email address.

So your address is [email protected] but you could use adresses like [email protected]...

So how would you handle this breach with your fastmail alias?

If I start noticing annoying spam being sent to [email protected] then I make an email rule to delete it and change my doordash account email to [email protected] along with a password change with my password manager?

It'd be nice if there was a way to way that pile of emails at some authority and say "Here, this is the crap that's come of that data breach." Ditto for any authorized (but shady) third party data sharing.

Sadly we currently lack a consumer protection bureau.

This is the part the is really missing.

I use [email protected] whenever I sign up at random sites. Last night I got a bunch of spams at the just-eat [1] account (food delivery, operating in 13 countries so not a small operation).

Now I know they've been breached, but:

1. They haven't reported it anywhere.

2. I don't know of any meaningful action I can take.

[1] https://en.wikipedia.org/wiki/Just_Eat

They're headquartered in the UK, so I'd start with making a complaint via the Information Comissioner's Office: https://ico.org.uk/make-a-complaint/. The best option is probably "Your personal information concerns":

> If ... you’re concerned about how an organisation has handled your information – if the information is wrong, they have lost it or disclosed it to someone else – tell us.

You could submit evidence of the breach to security researcher Troy Hunt at HaveIBeenPwned (https://haveibeenpwned.com/FAQs#SubmitBreach). He maintains a database of data breaches and people can sign up to be notified if their info appears in a new breach.

That would be an interesting project, create the breach-via-spam sensor network via accounts.

It also might not be a breach, but could of been sold via some sort marketing 'partnership'.

Some email services let you receive to a wildcard, so anything on your domain.

Also I believe Blur already does this (the company name may have changed but I forget)