"What we almost certainly have here is the result of someone selecting every http://ci.minneapolis.mn.us email address from old breaches or credential stuffing lists and passing it off as something it isn't. There's no evidence whatsoever to suggest this is legitimate."