While I cannot speak to what is happening to pharmacist specifically, people using their forum username or handle in their proton or other email addresses is the lowest of hanging fruit for a scammer to crawl and mine a site for.How is he getting your customers email addresses?
