I got something in the mail (snail, not e) telling me that some years back there was a data breach at {government-adjacent entity} leading eventually to a class action settlement paying out some modest sum. (I looked it up; it appears to be legit.) In order to opt-in, we are asked to return a brief form giving our full name and email address.
On a postcard.
Is it just me, or does this suggest that somebody has not learned something?