PSA: If you ever had a Yahoo account, or you get e-mails about purchases you did not make of expensive electronics, heads up:

I have resolved the issue, but someone hacked my AT&T account and ordered a new iPhone 7 for a family member, to be delivered to an address other than mine.

Yesterday I got a spate of mail from many strange newsletters and sites I had supposedly signed up for. Including the newsletter of the Dachau Concentration Camp! In among these thousands of mails was an e-mail that I took initially to be spam, regarding the purchase of the aforementioned phone.

I contacted AT&T yesterday and they said there was no sign of fraud, all was well, and they would note my account to be on the lookout for any issues. Today I got an e-mailed notice of Fedex shipping to (what seems to be a house for sale). I called AT&T again and this time they realized it was indeed true. I'm not paying (they used someone else's fraudulently obtained credit card data) and it's sorted.

I gave some consideration to how this might have happened and I have decided it relates back to a Yahoo account that I set up about 15 years ago but never use. It is known that hackers stole all the Yahoo information. The Yahoo e-mail is my first and last name (at) yahoo.com. Well, I realized that I have a first and last name account (at) the different e-mail provider I used for AT&T but I used the same password for both Yahoo and the AT&T website.