> Is it okay if your primary email, phone number and email address are out there in the wild?

Everyone's is. That ship has sailed.

"We're all so comprehensively pwned that if an email address isn't pwned, there's a good chance it doesn't belong to a real human."

https://www.troyhunt.com/pwned-or-bot/

that really only applies to people with 1-3 email addresses, where heavy re-use means that any breach likely made it public.

for those with an email address per-service, it's not true at all - and even when an email is leaked it is trivial to shut that email down.

in the past the guidance was don't re-use your passwords - I posit that the guidance should now be don't re-use your email addresses.

Most people with more than 1-3 email address have one account that has a publicly documented form to get unlimited email address. If you use gmail there are two ways to add an alias: the plus sign and adding dots between letters. It is trivial for anyone to check for a plus sign in an email address, and change the part after it thus giving themselves are different alias that you probably don't have blocked. Or they can [email protected] to [email protected].

Because this is so obvious I do not consider email per service useful unless you can cheaply create aliases that are not related to your main email, and adding aliases is not and automatic scheme, but instead. You have to do all of them or the entire scheme is useless, and the effort is high enough that I doubt the average person would do this even if we made it easy. Don't forget that you also need to select the right account to send from for each message while you think the place is not evil.

> Is it okay if your primary email, phone number and email address are out there in the wild?

They probably already were out in the wild.

It seems hard to believe but back when people had landlines, just about everybody was listed in the phone book -- name, address, and phone number.

Well, sort of. One name was. And some people paid to be unlisted.

And that address was static, typically discoverable by other means, instead of a digital object that could locate you 24x7 anywhere in the world.

You got to choose the name you were listed in. My grandpa always used his initials because he knew some old widows in the 1950s who didn't want scammers to know only a woman lived there which they could guess by a girls name when every other entry in the phone book was clearly a man's name. (make sure you read the above in your 1950's culture thinking, it won't make sense in the mode of modern culture)

By the same token, many such widows from that era — and, in many cases, later on — simply never changed their phone listings after they became widows. I recall my hometown’s phone listings containing many long-dead guys’ names for precisely that reason.

There’s not much for you to do on the surface.

The real risk is that there’s backend integration between multiple systems. It’s a nexus between airline and other systems, and if you are a person with personal security concerns who hasn’t really thought about this scenario, you need to think because you’re compromised.