This may explain some strange occurrences I had yesterday.
Starting at 7am, I received an Apple ID password reset request every 4 hours and 19 minutes, ending last night at midnight.
This Apple ID is also the login for my personal developer account (several years old). My developers IDs used for work never received a password reset request.
I highly doubt the hackers plan was to get email addresses and try to brute force from there... just doesn't make sense.
If you search Google, people are all the time receiving password reset emails going back years, even repeated ones.
Email addresses are in the clear all the time, and I've never heard of them being considered sensitive before. You should assume everyone has your email address.
Starting at 7am, I received an Apple ID password reset request every 4 hours and 19 minutes, ending last night at midnight.
This Apple ID is also the login for my personal developer account (several years old). My developers IDs used for work never received a password reset request.