After I'd received my third breach letter in as many days from a legitimate firm I actually do business with, I knew something was up. Turns out this is part of a much larger issue. The concern at the center of it all is called Epsilon.
You may have received the same warnings.